@mergesignal/shared 0.9.0 → 0.10.0

package/dist/assessmentProjection.d.ts

@@ -1,7 +1,16 @@
 import type { ScanResult } from "./types.js";
 import { type RepoIntelligence } from "./repoIntelligenceSchema.js";
-import type { Assessment, AssessmentPresentationPublic, ReachVisibility } from "@mergesignal/contracts";
+import type { Assessment, AssessmentPresentationPublic, ReachVisibility, VerificationIntensity } from "@mergesignal/contracts";
 import type { PresentationStatus } from "./presentation/dto/types.js";
+export type VerificationChannel = "runtime" | "artifact" | "none";
+export declare function resolveVerificationChannel(intensity: VerificationIntensity): VerificationChannel;
+export declare function collectRuntimeVerificationFocus(result: ScanResult): string[];
+export declare function collectArtifactVerificationFocus(result: ScanResult): string[];
+export declare function collectVerificationFocusForPresentation(presentation: AssessmentPresentationPublic, result: ScanResult): {
+    channel: VerificationChannel;
+    focus: string[];
+};
+/** @deprecated Use collectVerificationFocusForPresentation or channel-specific collectors. */
 export declare function collectVerificationFocus(result: ScanResult): string[];
 export declare function reachVisibilityLabel(visibility: ReachVisibility): string | undefined;
 export declare function formatAssessmentHeadline(assessment: Assessment, status: PresentationStatus): string;

package/dist/assessmentProjection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessmentProjection.d.ts","sourceRoot":"","sources":["../src/assessmentProjection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC5B,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAgCtE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAkBrE;AAED,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,eAAe,GAC1B,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAiDR;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAIlE;AAED,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,UAAU,GACjB,MAAM,EAAE,CAaV;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAIV;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,EAAE,CAI3E"}
+{"version":3,"file":"assessmentProjection.d.ts","sourceRoot":"","sources":["../src/assessmentProjection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAmDlE,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,qBAAqB,GAC/B,mBAAmB,CAIrB;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAQ5E;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAS7E;AAED,wBAAgB,uCAAuC,CACrD,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,GACjB;IAAE,OAAO,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAWnD;AAED,8FAA8F;AAC9F,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAErE;AAED,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,eAAe,GAC1B,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAiDR;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAIlE;AAED,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,UAAU,GACjB,MAAM,EAAE,CAaV;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAOV;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,EAAE,CAI3E"}

package/dist/assessmentProjection.js

@@ -32,12 +32,7 @@ function surfaceHintFromAssessment(assessment) {
     }
     return "application code";
 }
-export function collectVerificationFocus(result) {
-    const scope = result.assessment?.verificationScope;
-    if (scope?.focus?.length)
-        return [...scope.focus];
-    const packages = scope?.packages ?? [];
-    const parsed = safeParseRepoIntelligence(result.repoIntelligence);
+function collectVerificationFocusFromPackages(packages, parsed) {
     if (!parsed.ok)
         return [];
     const labels = [];
@@ -54,6 +49,42 @@ export function collectVerificationFocus(result) {
     }
     return labels;
 }
+export function resolveVerificationChannel(intensity) {
+    if (intensity === "none")
+        return "none";
+    if (intensity === "required")
+        return "runtime";
+    return "artifact";
+}
+export function collectRuntimeVerificationFocus(result) {
+    const scope = result.assessment?.verificationScope;
+    if (scope?.focus?.length)
+        return [...scope.focus];
+    const packages = scope?.packages ?? [];
+    return collectVerificationFocusFromPackages(packages, safeParseRepoIntelligence(result.repoIntelligence));
+}
+export function collectArtifactVerificationFocus(result) {
+    const artifactGrounded = result.assessment?.verificationScope?.artifactGrounded;
+    if (!artifactGrounded)
+        return [];
+    if (artifactGrounded.focus.length > 0)
+        return [...artifactGrounded.focus];
+    return collectVerificationFocusFromPackages(artifactGrounded.packages, safeParseRepoIntelligence(result.repoIntelligence));
+}
+export function collectVerificationFocusForPresentation(presentation, result) {
+    const channel = resolveVerificationChannel(presentation.verificationIntensity);
+    if (channel === "none") {
+        return { channel, focus: [] };
+    }
+    if (channel === "runtime") {
+        return { channel, focus: collectRuntimeVerificationFocus(result) };
+    }
+    return { channel, focus: collectArtifactVerificationFocus(result) };
+}
+/** @deprecated Use collectVerificationFocusForPresentation or channel-specific collectors. */
+export function collectVerificationFocus(result) {
+    return collectRuntimeVerificationFocus(result);
+}
 export function reachVisibilityLabel(visibility) {
     switch (visibility) {
         case "hidden":
@@ -118,7 +149,7 @@ export function projectInsightLines(assessment, result) {
 export function projectVerificationActions(assessment, presentation, result, max) {
     if (presentation.verificationIntensity === "none")
         return [];
-    const focus = collectVerificationFocus(result);
+    const { focus } = collectVerificationFocusForPresentation(presentation, result);
     return focus.slice(0, max);
 }
 export function applicationAreaLabels(ri) {

package/dist/assessmentProjection.verificationChannel.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=assessmentProjection.verificationChannel.test.d.ts.map

package/dist/assessmentProjection.verificationChannel.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessmentProjection.verificationChannel.test.d.ts","sourceRoot":"","sources":["../src/assessmentProjection.verificationChannel.test.ts"],"names":[],"mappings":""}

package/dist/assessmentProjection.verificationChannel.test.js

@@ -0,0 +1,110 @@
+import { describe, expect, it } from "vitest";
+import { artifactGroundedScopeFor, minimalReviewFocalPoint, verificationScopeFor, withAssessmentScope, } from "./fixtures/assessmentScopeFixtures.js";
+import { assessmentFastifyRuntime, assessmentPrettier, assessmentTypescriptPatch, } from "./fixtures/assessmentFixtures.js";
+import { collectArtifactVerificationFocus, collectRuntimeVerificationFocus, collectVerificationFocusForPresentation, resolveVerificationChannel, } from "./assessmentProjection.js";
+import { toPublicPresentation } from "./assessmentPresentationUtils.js";
+function scanResultWithAssessment(assessment) {
+    return {
+        totalScore: 30,
+        layerScores: {
+            security: 10,
+            maintainability: 10,
+            ecosystem: 10,
+            upgradeImpact: 0,
+        },
+        findings: [],
+        generatedAt: "2026-01-01T00:00:00.000Z",
+        assessment,
+        decision: {
+            recommendation: "safe",
+            confidence: "high",
+            reasoning: ["fixture"],
+        },
+        repoIntelligence: {},
+        changedPackages: assessment.reviewFocalPoint.anchors,
+    };
+}
+describe("resolveVerificationChannel", () => {
+    it("maps intensity to presentation channel", () => {
+        expect(resolveVerificationChannel("none")).toBe("none");
+        expect(resolveVerificationChannel("advisory")).toBe("artifact");
+        expect(resolveVerificationChannel("required")).toBe("runtime");
+    });
+});
+describe("collectVerificationFocusForPresentation", () => {
+    it("fastify required: runtime focus only", () => {
+        const result = scanResultWithAssessment(assessmentFastifyRuntime);
+        const presentation = toPublicPresentation(assessmentFastifyRuntime.presentation);
+        const projected = collectVerificationFocusForPresentation(presentation, result);
+        expect(projected.channel).toBe("runtime");
+        expect(projected.focus).toEqual(["routes", "middleware"]);
+        expect(collectRuntimeVerificationFocus(result)).toEqual(projected.focus);
+        expect(collectArtifactVerificationFocus(result)).toEqual([]);
+    });
+    it("typescript advisory: artifact focus only", () => {
+        const result = scanResultWithAssessment(assessmentTypescriptPatch);
+        const presentation = toPublicPresentation(assessmentTypescriptPatch.presentation);
+        const projected = collectVerificationFocusForPresentation(presentation, result);
+        expect(projected.channel).toBe("artifact");
+        expect(projected.focus).toEqual(["typecheck"]);
+        expect(collectArtifactVerificationFocus(result)).toEqual(["typecheck"]);
+        expect(collectRuntimeVerificationFocus(result)).toEqual([]);
+    });
+    it("prettier advisory: artifact focus only", () => {
+        const result = scanResultWithAssessment(assessmentPrettier);
+        const presentation = toPublicPresentation(assessmentPrettier.presentation);
+        const projected = collectVerificationFocusForPresentation(presentation, result);
+        expect(projected.channel).toBe("artifact");
+        expect(projected.focus).toEqual(["format"]);
+    });
+    it("none intensity: empty focus", () => {
+        const assessment = withAssessmentScope({
+            ...assessmentTypescriptPatch,
+            presentation: {
+                ...assessmentTypescriptPatch.presentation,
+                verificationIntensity: "none",
+            },
+        }, {
+            reviewFocalPoint: minimalReviewFocalPoint(["typescript"]),
+            verificationScope: verificationScopeFor(["fastify"], ["routes"], artifactGroundedScopeFor(["typescript"], ["typecheck"])),
+        });
+        const result = scanResultWithAssessment(assessment);
+        const projected = collectVerificationFocusForPresentation(toPublicPresentation(assessment.presentation), result);
+        expect(projected.channel).toBe("none");
+        expect(projected.focus).toEqual([]);
+    });
+    it("conflict fixture: advisory uses artifact only", () => {
+        const assessment = withAssessmentScope({
+            ...assessmentTypescriptPatch,
+            presentation: {
+                ...assessmentTypescriptPatch.presentation,
+                verificationIntensity: "advisory",
+            },
+        }, {
+            reviewFocalPoint: minimalReviewFocalPoint(["typescript"]),
+            verificationScope: verificationScopeFor(["fastify"], ["routes"], artifactGroundedScopeFor(["typescript"], ["typecheck"])),
+        });
+        const result = scanResultWithAssessment(assessment);
+        const projected = collectVerificationFocusForPresentation(toPublicPresentation(assessment.presentation), result);
+        expect(projected.channel).toBe("artifact");
+        expect(projected.focus).toEqual(["typecheck"]);
+        expect(projected.focus).not.toContain("routes");
+    });
+    it("conflict fixture: required uses runtime only", () => {
+        const assessment = withAssessmentScope({
+            ...assessmentFastifyRuntime,
+            presentation: {
+                ...assessmentFastifyRuntime.presentation,
+                verificationIntensity: "required",
+            },
+        }, {
+            reviewFocalPoint: minimalReviewFocalPoint(["fastify"]),
+            verificationScope: verificationScopeFor(["fastify"], ["routes", "middleware"], artifactGroundedScopeFor(["typescript"], ["typecheck"])),
+        });
+        const result = scanResultWithAssessment(assessment);
+        const projected = collectVerificationFocusForPresentation(toPublicPresentation(assessment.presentation), result);
+        expect(projected.channel).toBe("runtime");
+        expect(projected.focus).toEqual(["routes", "middleware"]);
+        expect(projected.focus).not.toContain("typecheck");
+    });
+});

package/dist/fixtures/assessmentFixtures.d.ts

@@ -1,7 +1,7 @@
 import type { Assessment } from "@mergesignal/contracts";
 export declare const assessmentTypescriptPatch: Assessment;
-export declare const assessmentPrettier: Assessment;
 export declare const assessmentEslint: Assessment;
+export declare const assessmentPrettier: Assessment;
 export declare const assessmentVitest: Assessment;
 export declare const assessmentFastifyRuntime: Assessment;
 export declare const assessmentBullmq: Assessment;

package/dist/fixtures/assessmentFixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessmentFixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/assessmentFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AA0BzD,eAAO,MAAM,yBAAyB,EAAE,UAevC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAUhC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAS9B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAe9B,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UAyBtC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UA6B9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAyBhC,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,EAAE,UAgC9C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UA2BtC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,UA6B5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,UAqBnC,CAAC"}
+{"version":3,"file":"assessmentFixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/assessmentFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AA2BzD,eAAO,MAAM,yBAAyB,EAAE,UAmBvC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAa9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAchC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAuB9B,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UAyBtC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UA6B9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAyBhC,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,EAAE,UAgC9C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UA2BtC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,UA6B5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,UAqBnC,CAAC"}

package/dist/fixtures/assessmentFixtures.js

@@ -1,4 +1,4 @@
-import { emptyReachScope, emptyVerificationScope, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./assessmentScopeFixtures.js";
+import { artifactGroundedScopeFor, emptyReachScope, emptyVerificationScope, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./assessmentScopeFixtures.js";
 const safeToolingPresentation = {
     narrativeIntensity: "minimal",
     reachVisibility: "hidden",
@@ -24,22 +24,22 @@ export const assessmentTypescriptPatch = withAssessmentScope({
 }, {
     reviewFocalPoint: minimalReviewFocalPoint(["typescript"]),
     reachScope: emptyReachScope(),
-    verificationScope: emptyVerificationScope(),
+    verificationScope: verificationScopeFor([], [], artifactGroundedScopeFor(["typescript"], ["typecheck"], ["package.json"])),
 });
-export const assessmentPrettier = withAssessmentScope({
+export const assessmentEslint = withAssessmentScope({
     ...assessmentTypescriptPatch,
-    factors: ["tooling_maintenance"],
 }, {
-    reviewFocalPoint: minimalReviewFocalPoint(["prettier"]),
+    reviewFocalPoint: minimalReviewFocalPoint(["eslint"]),
     reachScope: emptyReachScope(),
-    verificationScope: emptyVerificationScope(),
+    verificationScope: verificationScopeFor([], [], artifactGroundedScopeFor(["eslint"], ["lint"], [".eslintrc.cjs"])),
 });
-export const assessmentEslint = withAssessmentScope({
+export const assessmentPrettier = withAssessmentScope({
     ...assessmentTypescriptPatch,
+    factors: ["tooling_maintenance"],
 }, {
-    reviewFocalPoint: minimalReviewFocalPoint(["eslint"]),
+    reviewFocalPoint: minimalReviewFocalPoint(["prettier"]),
     reachScope: emptyReachScope(),
-    verificationScope: emptyVerificationScope(),
+    verificationScope: verificationScopeFor([], [], artifactGroundedScopeFor(["prettier"], ["format"], [".prettierrc"])),
 });
 export const assessmentVitest = withAssessmentScope({
     posture: "safe",
@@ -52,7 +52,7 @@ export const assessmentVitest = withAssessmentScope({
 }, {
     reviewFocalPoint: minimalReviewFocalPoint(["vitest"]),
     reachScope: emptyReachScope(),
-    verificationScope: emptyVerificationScope(),
+    verificationScope: verificationScopeFor([], [], artifactGroundedScopeFor(["vitest"], ["test_suite"], ["vitest.config.ts"])),
 });
 export const assessmentFastifyRuntime = withAssessmentScope({
     posture: "needs_review",

package/dist/fixtures/assessmentScopeFixtures.d.ts

@@ -1,4 +1,4 @@
-import type { Assessment, FocalElectionDimension, ReachScope, ReviewEpisodeShape, ReviewFocalPoint, VerificationScope } from "@mergesignal/contracts";
+import type { ArtifactGroundedVerificationScope, Assessment, FocalElectionDimension, ReachScope, ReviewEpisodeShape, ReviewFocalPoint, VerificationScope } from "@mergesignal/contracts";
 export declare function minimalReviewFocalPoint(anchors: string[], opts?: {
     episodeShape?: ReviewEpisodeShape;
     supportingPackages?: string[];
@@ -6,8 +6,10 @@ export declare function minimalReviewFocalPoint(anchors: string[], opts?: {
 }): ReviewFocalPoint;
 export declare function emptyReachScope(): ReachScope;
 export declare function reachScopeFor(packages: string[], maxBucket?: ReachScope["maxBucket"]): ReachScope;
+export declare function emptyArtifactGrounded(): ArtifactGroundedVerificationScope;
+export declare function artifactGroundedScopeFor(packages: string[], focus?: string[], artifactPaths?: string[]): ArtifactGroundedVerificationScope;
 export declare function emptyVerificationScope(): VerificationScope;
-export declare function verificationScopeFor(packages: string[], focus?: string[]): VerificationScope;
+export declare function verificationScopeFor(packages: string[], focus?: string[], artifactGrounded?: ArtifactGroundedVerificationScope): VerificationScope;
 /** Attach focal/scope fields required by assessmentSchema ABI 2. */
 export declare function withAssessmentScope(assessment: Omit<Assessment, "reviewFocalPoint" | "reachScope" | "verificationScope">, scope: {
     reviewFocalPoint: ReviewFocalPoint;

package/dist/fixtures/assessmentScopeFixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessmentScopeFixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/assessmentScopeFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,sBAAsB,EACtB,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAEhC,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,CAAC,EAAE;IACL,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC,GACA,gBAAgB,CAoBlB;AAED,wBAAgB,eAAe,IAAI,UAAU,CAE5C;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,GAAE,UAAU,CAAC,WAAW,CAAc,GAC9C,UAAU,CAEZ;AAED,wBAAgB,sBAAsB,IAAI,iBAAiB,CAE1D;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,GAAE,MAAM,EAAO,GACnB,iBAAiB,CAEnB;AAED,oEAAoE;AACpE,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,IAAI,CACd,UAAU,EACV,kBAAkB,GAAG,YAAY,GAAG,mBAAmB,CACxD,EACD,KAAK,EAAE;IACL,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC,GACA,UAAU,CAOZ"}
+{"version":3,"file":"assessmentScopeFixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/assessmentScopeFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,UAAU,EACV,sBAAsB,EACtB,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAEhC,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,CAAC,EAAE;IACL,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC,GACA,gBAAgB,CAoBlB;AAED,wBAAgB,eAAe,IAAI,UAAU,CAE5C;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,GAAE,UAAU,CAAC,WAAW,CAAc,GAC9C,UAAU,CAEZ;AAED,wBAAgB,qBAAqB,IAAI,iCAAiC,CAEzE;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,GAAE,MAAM,EAAO,EACpB,aAAa,GAAE,MAAM,EAAO,GAC3B,iCAAiC,CAEnC;AAED,wBAAgB,sBAAsB,IAAI,iBAAiB,CAM1D;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,GAAE,MAAM,EAAO,EACpB,gBAAgB,GAAE,iCAA2D,GAC5E,iBAAiB,CAEnB;AAED,oEAAoE;AACpE,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,IAAI,CACd,UAAU,EACV,kBAAkB,GAAG,YAAY,GAAG,mBAAmB,CACxD,EACD,KAAK,EAAE;IACL,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC,GACA,UAAU,CAOZ"}

package/dist/fixtures/assessmentScopeFixtures.js

@@ -25,11 +25,21 @@ export function emptyReachScope() {
 export function reachScopeFor(packages, maxBucket = "moderate") {
     return { packages, maxBucket };
 }
+export function emptyArtifactGrounded() {
+    return { packages: [], focus: [], artifactPaths: [] };
+}
+export function artifactGroundedScopeFor(packages, focus = [], artifactPaths = []) {
+    return { packages, focus, artifactPaths };
+}
 export function emptyVerificationScope() {
-    return { packages: [], focus: [] };
+    return {
+        packages: [],
+        focus: [],
+        artifactGrounded: emptyArtifactGrounded(),
+    };
 }
-export function verificationScopeFor(packages, focus = []) {
-    return { packages, focus };
+export function verificationScopeFor(packages, focus = [], artifactGrounded = emptyArtifactGrounded()) {
+    return { packages, focus, artifactGrounded };
 }
 /** Attach focal/scope fields required by assessmentSchema ABI 2. */
 export function withAssessmentScope(assessment, scope) {

package/dist/fixtures/engineAbi4Fixtures.d.ts

@@ -1,4 +1,16 @@
-import type { ScanResult } from "../types.js";
+import type { LayerScores, ScanResult } from "../types.js";
+type Abi4SplitScores = {
+    prRiskScore: number;
+    repositoryHealthScore: number;
+    layerScores?: LayerScores;
+};
+/**
+ * Attach differentiated ABI-4 prRisk + repositoryHealth wire blocks.
+ * `totalScore` mirrors repository health for legacy readers; presentation must
+ * consume `prRisk.score` via `deriveRiskSignals()`.
+ */
+export declare function withAbi4SplitScores<T extends ScanResult>(result: T, scores: Abi4SplitScores): T;
 /** Attach ABI-4 prRisk + repositoryHealth wire blocks for strict engine validation tests. */
 export declare function withAbi4EngineScores<T extends ScanResult>(result: T): T;
+export {};
 //# sourceMappingURL=engineAbi4Fixtures.d.ts.map

package/dist/fixtures/engineAbi4Fixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engineAbi4Fixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/engineAbi4Fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAEvE"}
+{"version":3,"file":"engineAbi4Fixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/engineAbi4Fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG3D,KAAK,eAAe,GAAG;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,UAAU,EACtD,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,eAAe,GACtB,CAAC,CAeH;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAEvE"}

package/dist/fixtures/engineAbi4Fixtures.js

@@ -1,4 +1,25 @@
 import { normalizeEngineOutputAbi4 } from "../scanResultSchema.js";
+/**
+ * Attach differentiated ABI-4 prRisk + repositoryHealth wire blocks.
+ * `totalScore` mirrors repository health for legacy readers; presentation must
+ * consume `prRisk.score` via `deriveRiskSignals()`.
+ */
+export function withAbi4SplitScores(result, scores) {
+    const layerScores = scores.layerScores ?? result.layerScores;
+    return {
+        ...result,
+        totalScore: scores.repositoryHealthScore,
+        layerScores,
+        prRisk: {
+            score: scores.prRiskScore,
+            layerScores: result.prRisk?.layerScores ?? layerScores,
+        },
+        repositoryHealth: {
+            totalScore: scores.repositoryHealthScore,
+            layerScores,
+        },
+    };
+}
 /** Attach ABI-4 prRisk + repositoryHealth wire blocks for strict engine validation tests. */
 export function withAbi4EngineScores(result) {
     return normalizeEngineOutputAbi4(result);

package/dist/index.d.ts

@@ -29,6 +29,6 @@ export * from "./trustedScanGuards.js";
 export * from "./actionsStepSummary.js";
 export * from "./productMessaging.js";
 export * from "./presentation/index.js";
-export { emptyReachScope, emptyVerificationScope, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./fixtures/assessmentScopeFixtures.js";
+export { emptyReachScope, emptyVerificationScope, emptyArtifactGrounded, artifactGroundedScopeFor, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./fixtures/assessmentScopeFixtures.js";
 export { assessmentStub, assessmentTypescriptPatch, } from "./fixtures/assessmentFixtures.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC"}

package/dist/index.js

@@ -29,5 +29,5 @@ export * from "./trustedScanGuards.js";
 export * from "./actionsStepSummary.js";
 export * from "./productMessaging.js";
 export * from "./presentation/index.js";
-export { emptyReachScope, emptyVerificationScope, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./fixtures/assessmentScopeFixtures.js";
+export { emptyReachScope, emptyVerificationScope, emptyArtifactGrounded, artifactGroundedScopeFor, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./fixtures/assessmentScopeFixtures.js";
 export { assessmentStub, assessmentTypescriptPatch, } from "./fixtures/assessmentFixtures.js";

package/dist/prRiskWiringRegression.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prRiskWiringRegression.test.d.ts.map

package/dist/prRiskWiringRegression.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prRiskWiringRegression.test.d.ts","sourceRoot":"","sources":["../src/prRiskWiringRegression.test.ts"],"names":[],"mappings":""}

package/dist/prRiskWiringRegression.test.js

@@ -0,0 +1,102 @@
+import { describe, expect, it } from "vitest";
+import { deriveScanNarrative } from "./deriveScanNarrative.js";
+import { resolveRepositoryHealthScore } from "./prRiskWire.js";
+import { buildScanPresentationBundle } from "./presentation/orchestration/buildScanPresentationBundle.js";
+import { presentDashboardCard } from "./presentation/presenters/presentDashboardCard.js";
+import { presentScanDetails } from "./presentation/presenters/presentScanDetails.js";
+import { presentCliScanSummary } from "./presentation/presenters/presentCliScanSummary.js";
+import { presentGitHubCheckRun } from "./presentation/presenters/presentGitHubCheckRun.js";
+import { presentGitHubPrComment } from "./presentation/presenters/presentGitHubPrComment.js";
+import { scanResultFastifyRuntime, scanResultTypescriptPatch, } from "./presentation/fixtures/scanResultFixtures.js";
+import { scanResultPrettier } from "./presentation/fixtures/presentationPersonaFixtures.js";
+const SCAN_ID = "22222222-2222-4222-8222-222222222222";
+const ORIGIN = "https://app.example.com";
+const validationPrShapes = [
+    {
+        id: "PR #27 fastify",
+        result: scanResultFastifyRuntime,
+        expectedPrRisk: 55,
+        expectedRepositoryHealth: 63,
+    },
+    {
+        id: "PR #28 typescript",
+        result: scanResultTypescriptPatch,
+        expectedPrRisk: 30,
+        expectedRepositoryHealth: 63,
+    },
+    {
+        id: "PR #29 prettier",
+        result: scanResultPrettier,
+        expectedPrRisk: 30,
+        expectedRepositoryHealth: 61,
+    },
+];
+function surfacesFor(result) {
+    const bundle = buildScanPresentationBundle({
+        result,
+        pipelineStatus: "done",
+    });
+    return {
+        bundle,
+        card: presentDashboardCard(bundle),
+        details: presentScanDetails(bundle, { scanId: SCAN_ID }),
+        cli: presentCliScanSummary(bundle, { repoLabel: "mergesignal/app" }),
+        check: presentGitHubCheckRun(bundle, {
+            scanId: SCAN_ID,
+            webAppOrigin: ORIGIN,
+        }),
+        comment: presentGitHubPrComment(bundle),
+    };
+}
+describe("PR Risk wiring regression (Investigation 1)", () => {
+    it.each(validationPrShapes)("$id: riskIndex follows prRisk.score, not repository health", ({ result, expectedPrRisk, expectedRepositoryHealth }) => {
+        expect(result.prRisk?.score).toBe(expectedPrRisk);
+        expect(result.repositoryHealth?.totalScore).toBe(expectedRepositoryHealth);
+        expect(result.totalScore).toBe(expectedRepositoryHealth);
+        expect(resolveRepositoryHealthScore(result)).toBe(expectedRepositoryHealth);
+        const facts = deriveScanNarrative(result);
+        expect(facts.riskSignals?.riskIndex).toBe(expectedPrRisk);
+        expect(facts.riskIndex).toBe(expectedPrRisk);
+        const { card, details, cli, check, comment } = surfacesFor(result);
+        expect(card.sortKey.riskIndex).toBe(expectedPrRisk);
+        expect(details.hero.prRiskScore).toBe(expectedPrRisk);
+        expect(details.signalSummary?.prRiskScore).toBe(expectedPrRisk);
+        expect(cli.metrics?.prRiskScore).toBe(expectedPrRisk);
+        expect(cli.metrics?.riskIndex).toBe(expectedPrRisk);
+        const prRiskSection = check.sections.find((s) => s.title === "PR Risk");
+        expect(prRiskSection?.bullets[0]).toMatch(new RegExp(`^${expectedPrRisk} \\(`));
+        expect(comment.introLines.some((l) => l.startsWith("PR Risk:"))).toBe(true);
+        expect(comment.introLines.find((l) => l.startsWith("PR Risk:"))).toContain(String(expectedPrRisk));
+    });
+    it("same repository health with different PR evidence yields different riskIndex", () => {
+        const fastify = surfacesFor(scanResultFastifyRuntime);
+        const typescript = surfacesFor(scanResultTypescriptPatch);
+        expect(resolveRepositoryHealthScore(scanResultFastifyRuntime)).toBe(resolveRepositoryHealthScore(scanResultTypescriptPatch));
+        expect(fastify.card.sortKey.riskIndex).not.toBe(typescript.card.sortKey.riskIndex);
+        expect(fastify.card.sortKey.riskIndex).toBe(55);
+        expect(typescript.card.sortKey.riskIndex).toBe(30);
+    });
+    it("historical fallback: missing prRisk uses totalScore for riskIndex", () => {
+        const historical = {
+            totalScore: 48,
+            layerScores: {
+                security: 10,
+                maintainability: 12,
+                ecosystem: 14,
+                upgradeImpact: 12,
+            },
+            findings: [],
+            generatedAt: "2026-01-01T00:00:00.000Z",
+            assessment: scanResultTypescriptPatch.assessment,
+            decision: scanResultTypescriptPatch.decision,
+        };
+        const facts = deriveScanNarrative(historical);
+        expect(facts.riskSignals?.riskIndex).toBe(48);
+        expect(facts.riskIndex).toBe(48);
+        const bundle = buildScanPresentationBundle({
+            result: historical,
+            pipelineStatus: "done",
+        });
+        expect(presentDashboardCard(bundle).sortKey.riskIndex).toBe(48);
+    });
+});

package/dist/presentation/dto/assessmentPresentationFields.d.ts

@@ -1,4 +1,5 @@
 import type { MergeConcernKind, NarrativeIntensity, ReachVisibility } from "@mergesignal/contracts";
+import type { VerificationChannel } from "../../assessmentProjection.js";
 /** Assessment-aligned fields projected identically across surfaces. */
 export type AssessmentPresentationFields = {
     posture: "safe" | "needs_review" | "risky";
@@ -6,6 +7,7 @@ export type AssessmentPresentationFields = {
     factors: string[];
     reasoning: string[];
     verificationFocus: string[];
+    verificationChannel: VerificationChannel;
     reachVisibility: ReachVisibility;
     narrativeIntensity: NarrativeIntensity;
 };

package/dist/presentation/dto/assessmentPresentationFields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessmentPresentationFields.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/assessmentPresentationFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAEhC,uEAAuE;AACvE,MAAM,MAAM,4BAA4B,GAAG;IACzC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO,CAAC;IAC3C,cAAc,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAE,eAAe,CAAC;IACjC,kBAAkB,EAAE,kBAAkB,CAAC;CACxC,CAAC"}
+{"version":3,"file":"assessmentPresentationFields.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/assessmentPresentationFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,uEAAuE;AACvE,MAAM,MAAM,4BAA4B,GAAG;IACzC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO,CAAC;IAC3C,cAAc,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,eAAe,EAAE,eAAe,CAAC;IACjC,kBAAkB,EAAE,kBAAkB,CAAC;CACxC,CAAC"}

package/dist/presentation/fixtures/presentationPersonaFixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presentationPersonaFixtures.d.ts","sourceRoot":"","sources":["../../../src/presentation/fixtures/presentationPersonaFixtures.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAkBjD,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AA+KjC,eAAO,MAAM,gBAAgB,EAAE,UAG7B,CAAC;AAEH,eAAO,MAAM,kBAAkB,EAAE,UAG/B,CAAC;AAEH,eAAO,MAAM,gBAAgB,EAAE,UAG7B,CAAC;AAEH,eAAO,MAAM,kBAAkB,EAAE,UAI/B,CAAC;AAEH,eAAO,MAAM,gBAAgB,EAAE,UAa7B,CAAC;AAEH,eAAO,MAAM,qBAAqB,EAAE,UAMnC,CAAC;AAEF,eAAO,MAAM,gCAAgC,EAAE,UAO9C,CAAC;AAEF,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,GAC1B,CAAC"}
+{"version":3,"file":"presentationPersonaFixtures.d.ts","sourceRoot":"","sources":["../../../src/presentation/fixtures/presentationPersonaFixtures.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAmBjD,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AA+KjC,eAAO,MAAM,gBAAgB,EAAE,UAG7B,CAAC;AAEH,eAAO,MAAM,kBAAkB,EAAE,UAShC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAG7B,CAAC;AAEH,eAAO,MAAM,kBAAkB,EAAE,UAI/B,CAAC;AAEH,eAAO,MAAM,gBAAgB,EAAE,UAa7B,CAAC;AAEH,eAAO,MAAM,qBAAqB,EAAE,UAMnC,CAAC;AAEF,eAAO,MAAM,gCAAgC,EAAE,UAO9C,CAAC;AAEF,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,GAC1B,CAAC"}

package/dist/presentation/fixtures/presentationPersonaFixtures.js

@@ -1,5 +1,6 @@
 import { assessmentBullmq, assessmentEslint, assessmentMixedTypescriptFastify, assessmentNextAuth, assessmentPrettier, assessmentUnknownSafe, assessmentVitest, } from "../../fixtures/assessmentFixtures.js";
 import { fixtureRepoIntelligenceFastify, fixtureRepoIntelligenceTypescript, } from "../../fixtures/repoIntelligenceFixtures.js";
+import { withAbi4SplitScores } from "../../fixtures/engineAbi4Fixtures.js";
 import { analysisPreparationWithValidRepoIntel } from "../../fixtures/repoIntelligenceTestHelpers.js";
 import { scanResultFastifyRuntime, scanResultLimitedContext, scanResultTypescriptPatch, } from "./scanResultFixtures.js";
 const basePrep = analysisPreparationWithValidRepoIntel();
@@ -165,9 +166,12 @@ export const scanResultEslint = scanBase(assessmentEslint, {
     changedPackages: ["eslint"],
     repoIntelligence: fixtureRepoIntelligenceEslint,
 });
-export const scanResultPrettier = scanBase(assessmentPrettier, {
+export const scanResultPrettier = withAbi4SplitScores(scanBase(assessmentPrettier, {
     changedPackages: ["prettier"],
     repoIntelligence: fixtureRepoIntelligencePrettier,
+}), {
+    prRiskScore: 30,
+    repositoryHealthScore: 61,
 });
 export const scanResultVitest = scanBase(assessmentVitest, {
     changedPackages: ["vitest"],

package/dist/presentation/fixtures/scanResultFixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanResultFixtures.d.ts","sourceRoot":"","sources":["../../../src/presentation/fixtures/scanResultFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAYjD,eAAO,MAAM,wBAAwB,EAAE,UA0CtC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,UA2BvC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UAqCtC,CAAC"}
+{"version":3,"file":"scanResultFixtures.d.ts","sourceRoot":"","sources":["../../../src/presentation/fixtures/scanResultFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAoBjD,eAAO,MAAM,wBAAwB,EAAE,UA4CtC,CAAC;AASF,eAAO,MAAM,yBAAyB,EAAE,UA6BvC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UAqCtC,CAAC"}

package/dist/presentation/fixtures/scanResultFixtures.js

@@ -1,14 +1,16 @@
+import { withAbi4SplitScores } from "../../fixtures/engineAbi4Fixtures.js";
 import { assessmentFastifyRuntime, assessmentLimitedContext, assessmentTypescriptPatch, } from "../../fixtures/assessmentFixtures.js";
 import { fixtureRepoIntelligenceFastify, fixtureRepoIntelligenceTypescript, } from "../../fixtures/repoIntelligenceFixtures.js";
 import { analysisPreparationWithValidRepoIntel } from "../../fixtures/repoIntelligenceTestHelpers.js";
-export const scanResultFastifyRuntime = {
-    totalScore: 55,
-    layerScores: {
-        security: 10,
-        maintainability: 20,
-        ecosystem: 30,
-        upgradeImpact: 15,
-    },
+const fastifyLayerScores = {
+    security: 10,
+    maintainability: 20,
+    ecosystem: 30,
+    upgradeImpact: 15,
+};
+export const scanResultFastifyRuntime = withAbi4SplitScores({
+    totalScore: 63,
+    layerScores: fastifyLayerScores,
     findings: [
         {
             id: "finding-fastify-runtime",
@@ -43,15 +45,20 @@ export const scanResultFastifyRuntime = {
             remediation: "Run auth smoke tests",
         },
     ],
+}, {
+    prRiskScore: 55,
+    repositoryHealthScore: 63,
+    layerScores: fastifyLayerScores,
+});
+const typescriptLayerScores = {
+    security: 5,
+    maintainability: 8,
+    ecosystem: 10,
+    upgradeImpact: 5,
 };
-export const scanResultTypescriptPatch = {
-    totalScore: 18,
-    layerScores: {
-        security: 5,
-        maintainability: 8,
-        ecosystem: 10,
-        upgradeImpact: 5,
-    },
+export const scanResultTypescriptPatch = withAbi4SplitScores({
+    totalScore: 63,
+    layerScores: typescriptLayerScores,
     findings: [],
     generatedAt: "2026-01-01T00:00:00.000Z",
     changedPackages: ["typescript"],
@@ -71,7 +78,11 @@ export const scanResultTypescriptPatch = {
         edges: 340,
         hotspots: [],
     },
-};
+}, {
+    prRiskScore: 30,
+    repositoryHealthScore: 63,
+    layerScores: typescriptLayerScores,
+});
 export const scanResultLimitedContext = {
     totalScore: 40,
     layerScores: {

package/dist/presentation/presentation.test.js

@@ -67,7 +67,9 @@ describe("presentDashboardCard personas", () => {
         expect(card.verdict?.posture).toBe("safe");
         expect(card.headline).toMatch(/patch upgrade/i);
         expect(card.headline).not.toMatch(/needs review/i);
-        expect(card.verification.length).toBe(0);
+        expect(card.verification.length).toBeGreaterThan(0);
+        expect(card.verificationChannel).toBe("artifact");
+        expect(card.verification.some((v) => v.toLowerCase().includes("typecheck"))).toBe(true);
     });
 });
 describe("presentScanDetails usage paths", () => {

package/dist/presentation/presentationPersonas.test.js

@@ -16,6 +16,7 @@ const personas = [
         density: "minimal",
         headlineMatch: /patch upgrade/i,
         headlineMustNot: /needs review/i,
+        verificationIncludes: ["typecheck"],
     },
     {
         name: "eslint",
@@ -34,6 +35,7 @@ const personas = [
         density: "minimal",
         headlineMatch: /patch upgrade/i,
         headlineMustNot: /needs review/i,
+        verificationIncludes: ["format"],
     },
     {
         name: "vitest",

package/dist/presentation/presenters/presentCliScanSummary.js

@@ -8,7 +8,7 @@ export function presentCliScanSummary(bundle, ctx = {}) {
     const layerLine = layerScores
         ? `security=${layerScores.security} maintainability=${layerScores.maintainability} ecosystem=${layerScores.ecosystem} upgradeImpact=${layerScores.upgradeImpact}`
         : "";
-    const prRiskScore = facts.riskIndex ?? 0;
+    const prRiskScore = facts.riskSignals?.riskIndex ?? facts.riskIndex ?? 0;
     return {
         ...projectAssessmentFields(bundle),
         header: {

package/dist/presentation/presenters/presentDashboardCard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presentDashboardCard.d.ts","sourceRoot":"","sources":["../../../src/presentation/presenters/presentDashboardCard.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAoEzF,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,sBAAsB,GAC7B,yBAAyB,CA8C3B;AAED,wBAAgB,sCAAsC,IAAI,yBAAyB,CAelF;AAED,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAC9C,yBAAyB,CAqB3B"}
+{"version":3,"file":"presentDashboardCard.d.ts","sourceRoot":"","sources":["../../../src/presentation/presenters/presentDashboardCard.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAoEzF,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,sBAAsB,GAC7B,yBAAyB,CA+C3B;AAED,wBAAgB,sCAAsC,IAAI,yBAAyB,CAelF;AAED,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAC9C,yBAAyB,CAqB3B"}

package/dist/presentation/presenters/presentDashboardCard.js

@@ -59,8 +59,9 @@ export function presentDashboardCard(bundle) {
     const { facts, profile } = bundle;
     const channels = buildNarrativeChannels(bundle);
     const posture = profile.status;
-    const riskIndex = facts.riskIndex != null && Number.isFinite(facts.riskIndex)
-        ? facts.riskIndex
+    const riskIndex = facts.riskSignals?.riskIndex != null &&
+        Number.isFinite(facts.riskSignals.riskIndex)
+        ? facts.riskSignals.riskIndex
         : -1;
     const insights = channels.insights.slice(0, INSIGHTS_CAP);
     const scopeAreas = channels.scopeAreas.length > 0

package/dist/presentation/profile/buildProfileFromAssessment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildProfileFromAssessment.d.ts","sourceRoot":"","sources":["../../../src/presentation/profile/buildProfileFromAssessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAIjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAiDpE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,GACjB,mBAAmB,CAuBrB"}
+{"version":3,"file":"buildProfileFromAssessment.d.ts","sourceRoot":"","sources":["../../../src/presentation/profile/buildProfileFromAssessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAIjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAoDpE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,GACjB,mBAAmB,CAuBrB"}

package/dist/presentation/profile/buildProfileFromAssessment.js

@@ -1,7 +1,7 @@
 import { narrativeIntensityToDensity } from "../../assessmentPresentationUtils.js";
 import { safeParseRepoIntelligence } from "../../repoIntelligenceSchema.js";
 import { scanSurfaceCopy } from "../../scanSurfaceCopy.js";
-import { collectVerificationFocus } from "../../assessmentProjection.js";
+import { collectVerificationFocusForPresentation } from "../../assessmentProjection.js";
 function focalAnchorPackage(assessment) {
     const anchors = assessment.reviewFocalPoint.anchors;
     if (!anchors.length)
@@ -14,7 +14,7 @@ function focalAnchorPackage(assessment) {
     return token;
 }
 function buildInterpretation(assessment, presentation, result) {
-    const verificationLabels = collectVerificationFocus(result);
+    const { focus: verificationLabels } = collectVerificationFocusForPresentation(presentation, result);
     const anchorPackage = focalAnchorPackage(assessment);
     const suppressRuntimeNarrative = presentation.reachVisibility === "hidden";
     let intent = "unknown_upgrade";

package/dist/presentation/projectAssessmentFields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projectAssessmentFields.d.ts","sourceRoot":"","sources":["../../src/presentation/projectAssessmentFields.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AAExF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,GAC7B,4BAA4B,CAW9B"}
+{"version":3,"file":"projectAssessmentFields.d.ts","sourceRoot":"","sources":["../../src/presentation/projectAssessmentFields.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AAExF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,GAC7B,4BAA4B,CAgB9B"}

package/dist/presentation/projectAssessmentFields.js

@@ -1,12 +1,14 @@
-import { collectVerificationFocus, projectReasoningLines, } from "../assessmentProjection.js";
+import { collectVerificationFocusForPresentation, projectReasoningLines, } from "../assessmentProjection.js";
 export function projectAssessmentFields(bundle) {
     const { assessment, presentation, result } = bundle;
+    const { channel, focus } = collectVerificationFocusForPresentation(presentation, result);
     return {
         posture: assessment.posture,
         primaryConcern: assessment.primaryConcern,
         factors: [...assessment.factors],
         reasoning: projectReasoningLines(result),
-        verificationFocus: collectVerificationFocus(result),
+        verificationFocus: focus,
+        verificationChannel: channel,
         reachVisibility: presentation.reachVisibility,
         narrativeIntensity: presentation.narrativeIntensity,
     };

package/dist/presentation/surfaceParity.test.js

@@ -85,6 +85,10 @@ describe("surfaceParity guardrail", () => {
             expect(s.details.verificationFocus).toEqual(s.fields.verificationFocus);
             expect(s.check.verificationFocus).toEqual(s.fields.verificationFocus);
             expect(s.comment.verificationFocus).toEqual(s.fields.verificationFocus);
+            expect(s.card.verificationChannel).toBe(s.fields.verificationChannel);
+            expect(s.details.verificationChannel).toBe(s.fields.verificationChannel);
+            expect(s.check.verificationChannel).toBe(s.fields.verificationChannel);
+            expect(s.comment.verificationChannel).toBe(s.fields.verificationChannel);
         });
         it(`${persona.name}: headline matches across card and details`, () => {
             const s = surfacesFor(persona.result);
@@ -133,6 +137,8 @@ describe("surfaceParity guardrail", () => {
         const ch26 = channelsById.get("validation-pr-26");
         expect(ch28.reachLabel).toBeUndefined();
         expect(ch29.reachLabel).toBeUndefined();
+        expect(ch28.verification.length).toBeGreaterThan(0);
+        expect(ch29.verification.length).toBeGreaterThan(0);
         expect(ch27.verification.length).toBeGreaterThan(0);
         expect(ch30.verification.length).toBeGreaterThan(0);
         expect(ch27.verification).not.toEqual(ch30.verification);

package/dist/presentation/verificationChannelParity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verificationChannelParity.test.d.ts.map

package/dist/presentation/verificationChannelParity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationChannelParity.test.d.ts","sourceRoot":"","sources":["../../src/presentation/verificationChannelParity.test.ts"],"names":[],"mappings":""}

package/dist/presentation/verificationChannelParity.test.js

@@ -0,0 +1,57 @@
+import { describe, expect, it } from "vitest";
+import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+import { presentDashboardCard } from "./presenters/presentDashboardCard.js";
+import { presentScanDetails } from "./presenters/presentScanDetails.js";
+import { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
+import { presentGitHubPrComment } from "./presenters/presentGitHubPrComment.js";
+import { projectAssessmentFields } from "./projectAssessmentFields.js";
+import { scanResultFastifyRuntime, scanResultPrettier, scanResultTypescriptPatch, } from "./fixtures/presentationPersonaFixtures.js";
+const SCAN_ID = "22222222-2222-4222-8222-222222222222";
+const ORIGIN = "https://app.example.com";
+describe("verification channel provenance parity", () => {
+    for (const persona of [
+        {
+            name: "fastify runtime",
+            result: scanResultFastifyRuntime,
+            channel: "runtime",
+            focusIncludes: "routes",
+        },
+        {
+            name: "typescript patch",
+            result: scanResultTypescriptPatch,
+            channel: "artifact",
+            focusIncludes: "typecheck",
+        },
+        {
+            name: "prettier",
+            result: scanResultPrettier,
+            channel: "artifact",
+            focusIncludes: "format",
+        },
+    ]) {
+        it(`${persona.name}: verificationChannel and focus match across surfaces`, () => {
+            const bundle = buildScanPresentationBundle({
+                result: persona.result,
+                pipelineStatus: "done",
+            });
+            const fields = projectAssessmentFields(bundle);
+            const card = presentDashboardCard(bundle);
+            const details = presentScanDetails(bundle, { scanId: SCAN_ID });
+            const check = presentGitHubCheckRun(bundle, {
+                scanId: SCAN_ID,
+                webAppOrigin: ORIGIN,
+            });
+            const comment = presentGitHubPrComment(bundle);
+            expect(fields.verificationChannel).toBe(persona.channel);
+            expect(card.verificationChannel).toBe(persona.channel);
+            expect(details.verificationChannel).toBe(persona.channel);
+            expect(check.verificationChannel).toBe(persona.channel);
+            expect(comment.verificationChannel).toBe(persona.channel);
+            expect(fields.verificationFocus).toEqual(card.verificationFocus);
+            expect(details.verificationFocus).toEqual(fields.verificationFocus);
+            expect(check.verificationFocus).toEqual(fields.verificationFocus);
+            expect(comment.verificationFocus).toEqual(fields.verificationFocus);
+            expect(fields.verificationFocus.some((f) => f.toLowerCase().includes(persona.focusIncludes.toLowerCase()))).toBe(true);
+        });
+    }
+});

package/dist/repoIntelligenceSchema.d.ts

@@ -35,13 +35,13 @@ export declare const repoIntelligenceWireSchema: z.ZodObject<{
         }, z.core.$strip>;
         areas: z.ZodOptional<z.ZodArray<z.ZodString>>;
         dependencyClass: z.ZodOptional<z.ZodEnum<{
+            lint: "lint";
+            format: "format";
             unknown: "unknown";
             runtime: "runtime";
             build: "build";
             test: "test";
             tooling: "tooling";
-            lint: "lint";
-            format: "format";
             ci: "ci";
         }>>;
         packageRole: z.ZodOptional<z.ZodEnum<{
@@ -70,10 +70,10 @@ export declare const repoIntelligenceWireSchema: z.ZodObject<{
             possible: "possible";
         }>>;
         expectedImpact: z.ZodOptional<z.ZodEnum<{
+            typecheck: "typecheck";
             unknown: "unknown";
             runtime: "runtime";
             build_time: "build_time";
-            typecheck: "typecheck";
             test_time: "test_time";
             development_only: "development_only";
         }>>;

package/dist/riskSignals.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=riskSignals.test.d.ts.map

package/dist/riskSignals.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"riskSignals.test.d.ts","sourceRoot":"","sources":["../src/riskSignals.test.ts"],"names":[],"mappings":""}

package/dist/riskSignals.test.js

@@ -0,0 +1,32 @@
+import { describe, expect, it } from "vitest";
+import { deriveRiskSignals } from "./riskSignals.js";
+import { resolveRepositoryHealthScore } from "./prRiskWire.js";
+function baseResult(overrides = {}) {
+    return {
+        totalScore: 63,
+        layerScores: {
+            security: 10,
+            maintainability: 20,
+            ecosystem: 30,
+            upgradeImpact: 15,
+        },
+        findings: [],
+        generatedAt: "2026-01-01T00:00:00.000Z",
+        ...overrides,
+    };
+}
+describe("deriveRiskSignals", () => {
+    it("prefers prRisk.score over totalScore and repositoryHealth", () => {
+        const result = baseResult({
+            prRisk: { score: 55 },
+            repositoryHealth: { totalScore: 63 },
+            totalScore: 63,
+        });
+        expect(deriveRiskSignals(result)?.riskIndex).toBe(55);
+        expect(resolveRepositoryHealthScore(result)).toBe(63);
+    });
+    it("falls back to totalScore when prRisk is missing (historical scans)", () => {
+        const result = baseResult({ totalScore: 48 });
+        expect(deriveRiskSignals(result)?.riskIndex).toBe(48);
+    });
+});

package/dist/scanPresentationBundle.golden.test.js

@@ -58,8 +58,8 @@ describe("scanPresentationBundle golden — proof model", () => {
         const { facts } = bundle;
         expect(facts.availability.corpusGateReason).toBe("ok");
         expect(facts.packageSemantics?.dependencyClass).toBe("tooling");
-        expect(facts.riskSignals?.riskIndex).toBe(18);
-        expect(facts.riskSignals?.band).toBe(scoreToBand(18));
+        expect(facts.riskSignals?.riskIndex).toBe(30);
+        expect(facts.riskSignals?.band).toBe(scoreToBand(30));
     });
     it("affected areas always carry linkage arrays (structure)", () => {
         for (const { result } of validationPersonas) {

package/dist/scanResultSchema.d.ts

@@ -156,10 +156,16 @@ export declare const engineOutputScanResultSchema: z.ZodObject<{
                 very_low: "very_low";
                 moderate: "moderate";
             }>;
+            entryPointFiles: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>;
         verificationScope: z.ZodObject<{
             packages: z.ZodArray<z.ZodString>;
             focus: z.ZodArray<z.ZodString>;
+            artifactGrounded: z.ZodOptional<z.ZodObject<{
+                packages: z.ZodArray<z.ZodString>;
+                focus: z.ZodArray<z.ZodString>;
+                artifactPaths: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>;
         }, z.core.$strip>;
         posture: z.ZodEnum<{
             safe: "safe";

package/dist/scanResultSchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanResultSchema.d.ts","sourceRoot":"","sources":["../src/scanResultSchema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtE,wGAAwG;AACxG,eAAO,MAAM,eAAe,EAAG,GAAY,CAAC;AAE5C,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAC;AAmBnD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAc/D;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8Bb,CAAC;AAUjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMvC,CAAC;AAEH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAC;AAEF,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,OAAO,GACZ,kCAAkC,GAAG,kCAAkC,CAezE;AAED,uFAAuF;AACvF,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,OAAO,GACZ,uBAAuB,CAMzB;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,GACZ,sBAAsB,GAAG,sBAAsB,CAajD;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAMhE"}
+{"version":3,"file":"scanResultSchema.d.ts","sourceRoot":"","sources":["../src/scanResultSchema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtE,wGAAwG;AACxG,eAAO,MAAM,eAAe,EAAG,GAAY,CAAC;AAE5C,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAC;AAmBnD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAc/D;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8Bb,CAAC;AAUjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMvC,CAAC;AAEH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAC;AAEF,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,OAAO,GACZ,kCAAkC,GAAG,kCAAkC,CAezE;AAED,uFAAuF;AACvF,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,OAAO,GACZ,uBAAuB,CAMzB;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,GACZ,sBAAsB,GAAG,sBAAsB,CAajD;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAMhE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mergesignal/shared",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "MergeSignal shared scan contract, presentation policy, and trusted validation",
   "type": "module",
   "main": "./dist/index.js",
@@ -38,7 +38,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@mergesignal/contracts": "0.1.0",
+    "@mergesignal/contracts": "catalog:",
     "zod": "^4.4.3"
   },
   "devDependencies": {