@mnemom/mnemom 0.17.38-next.0 → 0.17.38-next.2

package/dist/lib/scan/report-email.d.ts

@@ -1,93 +1,10 @@
-import { type CostPerPr, type CostSpend } from "./cost-per-pr.js";
-import type { ScanResult } from "./scan.js";
-import type { ShareLevel } from "./share.js";
-export declare const REPORT_SCHEMA_VERSION = "org-scan-report/1";
-export declare const ESTIMATE_NAME = "automatable_work_share";
-export declare const METHOD_URL = "https://www.mnemom.ai/org-scan-method";
-export interface EmailReport {
-    schema_version: typeof REPORT_SCHEMA_VERSION;
-    org_id: string;
-    scan_id: string;
-    period: {
-        start: string;
-        end: string;
-    };
-    generated_at: string;
-    measured: {
-        teams: [];
-        summary: {
-            pr_count: number;
-            revert_count: number;
-            automatable_count: number;
-            examined_count: number;
-            tokens_total: 0;
-        };
-        spend: {
-            source: "pr_estimate";
-            figure?: {
-                low_cents: number;
-                high_cents: number;
-            };
-            ai_prs_by_tool?: Array<{
-                tool: string;
-                count: number;
-            }>;
-        };
-    };
-    estimate: {
-        name: string;
-        value: number;
-        unit: string;
-        method_url: string;
-    };
-    /**
-     * Optional, added after org-scan-report/1 shipped; absent whenever it cannot be computed (no spend,
-     * no merged PR in the period, an incomplete scan, an empty bucket). See cost-per-pr.ts.
-     *   cost_per_merged_pr  average cost of one merged PR in the period
-     *   cost_by_pr_size     { small | medium | large }: average cost of ONE PR of that size, per-bucket
-     *                       keys absent when the bucket is empty. small < 50 lines changed, medium 50..500, large > 500.
-     * A figure is { label: "estimate", spend_source, pr_scope, pr_count } (+ spend_scope: "whole_org" on
-     * anthropic_usage) plus { value_cents } (anthropic_usage) or { low_cents, high_cents } (modelled_range). Integer cents.
-     * pr_scope is "ai_assisted" for modelled_range (spend and size buckets split across AI-assisted PRs only;
-     * absent if none) and "all_merged" otherwise; pr_count counts PRs in that scope.
-     * Always attached when present. The API's report validator (mnemom-api src/org-scan/report-schema.ts) is
-     * closed, so an API that does not yet list these keys answers 400 invalid_report; sendReportEmail then
-     * retries once without them so the report email still goes out.
-     */
-    cost_per_merged_pr?: CostPerPr["cost_per_merged_pr"];
-    cost_by_pr_size?: CostPerPr["cost_by_pr_size"];
-}
-export interface ReportEmailBody {
-    report: EmailReport;
-    share_level: ShareLevel;
-    coverage: {
-        complete: boolean;
-    };
-    cto_email?: string;
-}
-/**
- * Maps the local scan onto the route's closed report shape. Team totals stay empty (they come only from
- * Anthropic usage, which the local scan does not carry). The estimate is the share of examined merged
- * PRs that finished with every CI check passing. `figure` (tier 3 range) is included only when the CLI
- * itself would let that line leave the machine (`sendSpendRange`).
- */
-export declare function buildEmailReport(result: ScanResult, o: {
-    orgId: string;
-    now: () => number;
-    sendSpendRange: boolean;
-    scanId?: string;
-    /** The requested scan period (the one the spend covers), not the examined window. */
-    period?: {
-        start: string;
-        end: string;
-    };
-    /** The one spend source the cost figures are split from; null/absent leaves them out. */
-    costSpend?: CostSpend | null;
-}): EmailReport;
-export declare function buildEmailBody(report: EmailReport, level: ShareLevel, complete: boolean, ctoEmail?: string): ReportEmailBody;
+import type { ReportEmailBody } from "../../vendor/shared/org-scan-core/report-build.js";
+export { REPORT_SCHEMA_VERSION, ESTIMATE_NAME, METHOD_URL, buildEmailReport, buildEmailBody, type EmailReport, type ReportEmailBody, } from "../../vendor/shared/org-scan-core/report-build.js";
 /** Closed set of failure names; each has fixed text. */
-export type EmailFailure = "presend_check_failed" | "email_not_sent" | "not_signed_in" | "not_a_member" | "report_rejected" | "no_recipients" | "runner_not_emailed" | "network_error" | "unexpected_response";
-export declare const failureMessage: (f: EmailFailure) => string;
+export type EmailFailure = "presend_check_failed" | "email_not_sent" | "not_signed_in" | "not_a_member" | "report_rejected" | "no_recipients" | "runner_not_emailed" | "emails_rejected" | "email_domain_not_allowed" | "admins_not_found" | "scan_limit_reached" | "network_error" | "unexpected_response";
+/** How long to wait, in plain words (rounded up to whole seconds, minutes or hours). */
+export declare function retryWait(ms: number): string;
+export declare const failureMessage: (f: EmailFailure, retryAfterMs?: number) => string;
 export declare const DRY_RUN_MSG = "Report email is in dry-run on this environment; nothing was sent.";
 export declare const UNAVAILABLE_MSG = "Report email is not available for this org yet; nothing was sent.";
 export declare class ReportEmailError extends Error {
@@ -97,6 +14,8 @@ export declare class ReportEmailError extends Error {
 export type EmailOutcome = {
     status: "sent";
     recipients: number;
+    adminsMissed?: number;
+    limited?: true;
 } | {
     status: "dry_run";
 } | {
@@ -104,6 +23,7 @@ export type EmailOutcome = {
 } | {
     status: "failed";
     reason: EmailFailure;
+    retryAfterMs?: number;
 };
 export interface ReportEmailDeps {
     post?: (endpoint: string, body: ReportEmailBody) => Promise<unknown>;

package/dist/lib/scan/report-email.js

@@ -1,87 +1,20 @@
 /**
- * The report email: after every successful scan the person who ran it is emailed the report, with no
- * opt-out and at every share level. One call to `POST /v1/orgs/{org_id}/scan/report-email`
- * (mnemom-api#4270). The server resolves the runner's address from the signed-in identity, so the
- * request carries no runner address; `cto_email` is sent only when the user passed --cto-email.
+ * The report email: after every successful scan the full report, with the counts for each repo, is
+ * emailed to the person who ran it, every Org Admin of the org and anyone the runner added (MNE-9634),
+ * with no opt-out and at every share level. One call to `POST /v1/orgs/{org_id}/scan/report-email`.
+ * The server resolves the runner's address from the signed-in identity and the Org Admins from the org,
+ * so the request carries neither; `emails` holds only the extra addresses the runner added.
  *
- * The body is exactly the route's contract and nothing else: `report` (org-scan-report/1: team totals
- * and counts only), `share_level`, `coverage.complete` and the optional `cto_email`. No Record totals,
- * no repo names, no author, title, branch or body text, no credential.
+ * The body is exactly the route's contract and nothing else: `report` (org-scan-report/1: team totals,
+ * counts, and the per-repo counts `by_repo`), `share_level`, `coverage.complete` and the optional
+ * `emails`. No author, title, branch or body text, no credential.
  *
  * Every failure has a fixed name and fixed text. The server's body, the thrown value and the
  * credential never reach the terminal.
  */
-import { randomUUID } from "node:crypto";
 import { MnemomApiError, postApi } from "../api.js";
-import { buildCostPerPr } from "./cost-per-pr.js";
-export const REPORT_SCHEMA_VERSION = "org-scan-report/1";
-export const ESTIMATE_NAME = "automatable_work_share";
-export const METHOD_URL = "https://www.mnemom.ai/org-scan-method";
-const cents = (usd) => Math.max(0, Math.round(usd * 100));
-/**
- * Maps the local scan onto the route's closed report shape. Team totals stay empty (they come only from
- * Anthropic usage, which the local scan does not carry). The estimate is the share of examined merged
- * PRs that finished with every CI check passing. `figure` (tier 3 range) is included only when the CLI
- * itself would let that line leave the machine (`sendSpendRange`).
- */
-export function buildEmailReport(result, o) {
-    const { totals, coverage } = result;
-    const value = totals.examined > 0 ? Math.round((totals.ciGreen / totals.examined) * 1000) / 10 : 0;
-    const scope = coverage.complete
-        ? "every merged pull request in the period"
-        : "a capped sample (not every merged pull request in the period)";
-    const unit = `percent of merged pull requests examined (${totals.examined} of ${totals.prs}, ${scope}) ` +
-        `that finished with all CI checks passing; an estimate from pull request metadata, not a measured share`;
-    const byTool = result.spend.kind === "range"
-        ? Object.entries(result.spend.byTool)
-            .filter(([, n]) => typeof n === "number" && n > 0)
-            .map(([tool, count]) => ({ tool, count: count }))
-        : [];
-    // Only a scan that read every merged PR in the period gives an average that means anything.
-    const exhaustive = coverage.complete && coverage.prsSkippedLarge === 0 && coverage.prsUnreadable === 0;
-    const cost = buildCostPerPr(result.prSizes, o.period ?? { start: coverage.windowStart, end: coverage.windowEnd }, o.costSpend ?? null, exhaustive);
-    return {
-        schema_version: REPORT_SCHEMA_VERSION,
-        org_id: o.orgId,
-        scan_id: o.scanId ?? randomUUID(),
-        // The span the scan actually examined (coverage), never the requested period: with no --period
-        // that defaults to today..today, which is not what was read.
-        period: { start: coverage.windowStart, end: coverage.windowEnd },
-        generated_at: new Date(o.now()).toISOString(),
-        measured: {
-            teams: [],
-            summary: {
-                pr_count: totals.prs,
-                revert_count: totals.reverts,
-                automatable_count: totals.ciGreen,
-                examined_count: totals.examined,
-                tokens_total: 0,
-            },
-            spend: {
-                source: "pr_estimate",
-                ...(o.sendSpendRange && result.spend.kind === "range"
-                    ? {
-                        figure: {
-                            low_cents: cents(result.spend.lowUsd),
-                            high_cents: cents(result.spend.highUsd),
-                        },
-                    }
-                    : {}),
-                ...(o.sendSpendRange && byTool.length > 0 ? { ai_prs_by_tool: byTool } : {}),
-            },
-        },
-        estimate: { name: ESTIMATE_NAME, value, unit, method_url: METHOD_URL },
-        ...cost,
-    };
-}
-export function buildEmailBody(report, level, complete, ctoEmail) {
-    return {
-        report,
-        share_level: level,
-        coverage: { complete },
-        ...(ctoEmail !== undefined ? { cto_email: ctoEmail } : {}),
-    };
-}
+// The report body is built by the shared core (MNE-9752), so the Mnemom-side run sends the same report.
+export { REPORT_SCHEMA_VERSION, ESTIMATE_NAME, METHOD_URL, buildEmailReport, buildEmailBody, } from "../../vendor/shared/org-scan-core/report-build.js";
 const FAILURE_TEXT = {
     presend_check_failed: "the report failed Mnemom's pre-send checks, so no email was sent.",
     email_not_sent: "Mnemom could not send the email.",
@@ -89,11 +22,30 @@ const FAILURE_TEXT = {
     not_a_member: "your account is not a member of the org passed to --org.",
     report_rejected: "Mnemom rejected the report as malformed.",
     no_recipients: "the server accepted the report but reported zero recipients.",
-    runner_not_emailed: "the report was not delivered to you (the person who ran the scan); it may have gone only to the CTO. Re-run the scan, and check that your account has a valid email address.",
+    runner_not_emailed: "the report was not delivered to you (the person who ran the scan); it may have gone only to the others. Re-run the scan, and check that your account has a valid email address.",
+    emails_rejected: "an address you added was not accepted. Add up to 10 valid email addresses.",
+    email_domain_not_allowed: "an address you added is not on your organization's email domain. Add addresses on your own domain or mnemom.ai.",
+    admins_not_found: "Mnemom could not look up your org admins, so no email was sent. Try again in a moment.",
+    scan_limit_reached: "the scan limit was reached, so no email was sent.",
     network_error: "Mnemom could not be reached.",
     unexpected_response: "Mnemom answered in an unexpected way.",
 };
-export const failureMessage = (f) => `Your report was NOT emailed: ${f}. ${FAILURE_TEXT[f]}`;
+/** How long to wait, in plain words (rounded up to whole seconds, minutes or hours). */
+export function retryWait(ms) {
+    const s = Math.max(1, Math.ceil(ms / 1000));
+    if (s < 60)
+        return `${s} second${s === 1 ? "" : "s"}`;
+    const m = Math.ceil(s / 60);
+    if (m < 120)
+        return `${m} minute${m === 1 ? "" : "s"}`;
+    const h = Math.ceil(m / 60);
+    return `${h} hour${h === 1 ? "" : "s"}`;
+}
+export const failureMessage = (f, retryAfterMs) => f === "scan_limit_reached"
+    ? `Your report was NOT emailed: ${f}. ${FAILURE_TEXT[f]} ${retryAfterMs !== undefined
+        ? `Try again in about ${retryWait(retryAfterMs)}.`
+        : "Try again later."}`
+    : `Your report was NOT emailed: ${f}. ${FAILURE_TEXT[f]}`;
 export const DRY_RUN_MSG = "Report email is in dry-run on this environment; nothing was sent.";
 export const UNAVAILABLE_MSG = "Report email is not available for this org yet; nothing was sent.";
 export class ReportEmailError extends Error {
@@ -110,6 +62,8 @@ function classifyStatus(status) {
         return "not_signed_in";
     if (status === 403)
         return "not_a_member";
+    if (status === 429)
+        return "scan_limit_reached";
     if (status === 422)
         return "presend_check_failed";
     if (status === 502)
@@ -118,11 +72,27 @@ function classifyStatus(status) {
         return "report_rejected";
     return "unexpected_response";
 }
-/** The body without the optional cost figures; the same object when it carries none. */
-function withoutCostFigures(body) {
-    const { cost_per_merged_pr: _a, cost_by_pr_size: _b, ...rest } = body.report;
-    return "cost_per_merged_pr" in body.report || "cost_by_pr_size" in body.report
-        ? { ...body, report: rest }
+/**
+ * The body an API that predates this contract understands: no cost figures, no per-repo rows, and the
+ * share level under its old name (`analytics` was `summary`; the meaning is the same, never upgraded).
+ * The same object when nothing needs changing.
+ */
+function legacyBody(body) {
+    const { cost_per_merged_pr: _a, cost_by_pr_size: _b, by_repo: _c, ...rest } = body.report;
+    const changed = "cost_per_merged_pr" in body.report ||
+        "cost_by_pr_size" in body.report ||
+        "by_repo" in body.report ||
+        body.share_level === "analytics" ||
+        (body.emails?.length ?? 0) > 0;
+    const { emails, ...top } = body;
+    const extra = emails?.[0];
+    return changed
+        ? {
+            ...top,
+            ...(extra ? { cto_email: extra } : {}),
+            report: rest,
+            share_level: body.share_level === "analytics" ? "summary" : body.share_level,
+        }
         : body;
 }
 /** Never throws. The thrown value, the response body and the credential are never surfaced. */
@@ -135,18 +105,29 @@ export async function sendReportEmail(orgId, body, deps = {}) {
     catch (e) {
         if (e instanceof MnemomApiError && e.effectiveStatus === 404)
             return { status: "unavailable" };
-        // An API that predates the cost figures rejects the unknown keys with a 400. The email must still
-        // go out, so retry once with the figures left off; any other failure is classified as below.
+        // An API that predates the cost figures, the per-repo rows or the analytics name rejects them with a 400. The email must still
+        // go out, so retry once in the old shape; any other failure is classified as below.
         if (e instanceof MnemomApiError && e.effectiveStatus === 400) {
-            const bare = withoutCostFigures(body);
-            if (bare !== body)
-                return sendReportEmail(orgId, bare, deps);
+            const bare = legacyBody(body);
+            if (bare !== body && !/email|admin/i.test(e.code ?? "")) {
+                const r = await sendReportEmail(orgId, bare, deps);
+                return r.status === "sent" ? { ...r, limited: true } : r;
+            }
         }
         if (e instanceof MnemomApiError) {
             // A 4xx that names the runner (the API refuses a send that would skip the runner) gets its own text.
+            if (e.code === "email_domain_not_allowed")
+                return { status: "failed", reason: "email_domain_not_allowed" };
+            if (/emails/i.test(e.code ?? ""))
+                return { status: "failed", reason: "emails_rejected" };
+            if (e.code === "admin_lookup_failed")
+                return { status: "failed", reason: "admins_not_found" };
             if (e.effectiveStatus >= 400 && e.effectiveStatus < 500 && /runner/i.test(e.code ?? ""))
                 return { status: "failed", reason: "runner_not_emailed" };
-            return { status: "failed", reason: classifyStatus(e.effectiveStatus) };
+            const reason = classifyStatus(e.effectiveStatus);
+            return reason === "scan_limit_reached" && e.retryAfterMs !== undefined
+                ? { status: "failed", reason, retryAfterMs: e.retryAfterMs }
+                : { status: "failed", reason };
         }
         return { status: "failed", reason: "network_error" };
     }
@@ -158,8 +139,11 @@ export async function sendReportEmail(orgId, body, deps = {}) {
         return { status: "failed", reason: "unexpected_response" };
     if (recipients === 0)
         return { status: "failed", reason: "no_recipients" };
-    // `skipped` lists the roles ("runner", "cto") that got no copy. The runner must always get the report.
+    // `skipped` lists the roles ("runner", "admin", "added", "cto") that got no copy. The runner must always get the report.
     if (Array.isArray(o.skipped) && o.skipped.includes("runner"))
         return { status: "failed", reason: "runner_not_emailed" };
-    return o.status === "dry_run" ? { status: "dry_run" } : { status: "sent", recipients };
+    const adminsMissed = Array.isArray(o.skipped) ? o.skipped.filter((s) => s === "admin").length : 0;
+    return o.status === "dry_run"
+        ? { status: "dry_run" }
+        : { status: "sent", recipients, ...(adminsMissed > 0 ? { adminsMissed } : {}) };
 }

package/dist/lib/scan/scan.d.ts

@@ -1,67 +1 @@
-/**
- * Local capped scan core. Port of the window path of runCappedScan (mnemom-api capped-scan.ts, PR #4208)
- * plus the spend estimate (#4222). Everything outside is injected (credential, PR source, clock), so the
- * core touches no network or disk, and the report exists only in memory.
- */
-import { type GitHubCredential } from "./credential.js";
-import { type ScanCaps, type StopReason } from "./caps.js";
-import { type FailureReason } from "./failure.js";
-import { type PrSource } from "./pr-source.js";
-import type { PrSize } from "./cost-per-pr.js";
-import { type SpendEstimate } from "./spend/spend-estimate.js";
-export interface ScanInput {
-    repos: string[];
-    /** Inclusive dates, YYYY-MM-DD. */
-    period: {
-        start: string;
-        end: string;
-    };
-}
-export interface ScanDeps {
-    credential: GitHubCredential;
-    prs?: PrSource;
-    fetchImpl?: typeof fetch;
-    now?: () => number;
-    caps?: Partial<ScanCaps>;
-}
-export interface Coverage {
-    complete: boolean;
-    stoppedBy: StopReason | null;
-    prsExamined: number;
-    prsSkippedLarge: number;
-    prsUnreadable: number;
-    reposRead: number;
-    reposTotal: number;
-    reads: number;
-    windowStart: string;
-    windowEnd: string;
-    /** Set only when the window held more merged PRs than the quota and an even sample was taken. */
-    windowSampledFrom?: number;
-}
-export interface RepoTotals {
-    repo: string;
-    prs: number;
-    reverts: number;
-    ciGreen: number;
-}
-export interface ScanResult {
-    coverage: Coverage;
-    totals: {
-        prs: number;
-        reverts: number;
-        ciGreen: number;
-        examined: number;
-    };
-    byRepo: RepoTotals[];
-    spend: SpendEstimate;
-    /** Every merged PR read in full (reverts and unreadable/oversize PRs excluded): merge day and size. In memory only. */
-    prSizes: PrSize[];
-}
-export type ScanOutcome = {
-    status: "done";
-    result: ScanResult;
-} | {
-    status: "withheld";
-    reason: FailureReason;
-};
-export declare function runLocalScan(deps: ScanDeps, input: ScanInput): Promise<ScanOutcome>;
+export * from "../../vendor/shared/org-scan-core/scan.js";

package/dist/lib/scan/scan.js

@@ -1,194 +1,2 @@
-/**
- * Local capped scan core. Port of the window path of runCappedScan (mnemom-api capped-scan.ts, PR #4208)
- * plus the spend estimate (#4222). Everything outside is injected (credential, PR source, clock), so the
- * core touches no network or disk, and the report exists only in memory.
- */
-import { assertReadOnlyCredential, isValidRepoSlug } from "./credential.js";
-import { Budget, COVERAGE_MONTHS, evenSample, monthsBefore, sanitiseCaps, } from "./caps.js";
-import { classifyFailure } from "./failure.js";
-import { createGithubPrSource } from "./pr-source.js";
-import { estimateSpend } from "./spend/spend-estimate.js";
-const validDay = (d) => typeof d === "string" &&
-    /^\d{4}-\d{2}-\d{2}$/.test(d) &&
-    !Number.isNaN(Date.parse(`${d}T00:00:00Z`));
-export async function runLocalScan(deps, input) {
-    if (!validDay(input.period.start) ||
-        !validDay(input.period.end) ||
-        input.repos.length === 0 ||
-        !input.repos.every(isValidRepoSlug)) {
-        return { status: "withheld", reason: "invalid_input" };
-    }
-    try {
-        await assertReadOnlyCredential(deps.credential);
-    }
-    catch (e) {
-        return { status: "withheld", reason: classifyFailure(e) };
-    }
-    const prs = deps.prs ?? createGithubPrSource({ credential: deps.credential, fetchImpl: deps.fetchImpl });
-    const now = deps.now ?? Date.now;
-    const caps = sanitiseCaps(deps.caps ?? {});
-    const budget = new Budget(caps, now, now());
-    let stoppedBy = null;
-    const stop = (r) => {
-        if (r && !stoppedBy)
-            stoppedBy = r;
-        return stoppedBy !== null;
-    };
-    const periodStart = input.period.start;
-    const windowStart = periodStart < monthsBefore(input.period.end, COVERAGE_MONTHS)
-        ? periodStart
-        : monthsBefore(input.period.end, COVERAGE_MONTHS);
-    const endDay = input.period.end;
-    const pool = [];
-    let reposRead = 0;
-    let listingCut = false;
-    try {
-        for (const repo of input.repos) {
-            if (stoppedBy !== null || stop(budget.block()))
-                break;
-            reposRead += 1;
-            let cursor = null;
-            const days = [];
-            let oldestUpdated = "9999-99-99";
-            do {
-                if (stop(budget.block()))
-                    break;
-                // Listing may use at most half the read budget, so it never starves the reads of the PRs it found.
-                if (budget.reads * 2 > caps.maxReads) {
-                    listingCut = true;
-                    break;
-                }
-                budget.charge(1);
-                const page = await prs.indexMerged(repo, cursor, budget.room() + 1);
-                budget.charge((Number.isFinite(page.reads) && page.reads >= 1 ? page.reads : 1) - 1);
-                const overrun = budget.overrun();
-                if (overrun) {
-                    stop(overrun);
-                    break;
-                }
-                for (const item of page.items) {
-                    pool.push({ repo, item });
-                    days.push(item.mergedDay);
-                    if (item.updatedDay < oldestUpdated)
-                        oldestUpdated = item.updatedDay;
-                }
-                cursor = page.next;
-                // Newest-activity first: once a seen PR was last touched before D, no later page holds a PR
-                // merged on or after D. Stop when D is both the window start and the merge day of this repo's
-                // maxPrs-th newest merged PR.
-                const kth = days.length >= caps.maxPrs ? [...days].sort().reverse()[caps.maxPrs - 1] : null;
-                if (kth !== null && oldestUpdated < (kth < windowStart ? kth : windowStart))
-                    break;
-            } while (cursor !== null && stoppedBy === null);
-            if (listingCut) {
-                if (cursor === null && days.length === 0)
-                    reposRead -= 1;
-                break;
-            }
-        }
-        // Newest first, ties by repo then number: the same pool always gives the same sample.
-        for (let i = pool.length - 1; i >= 0; i--)
-            if (pool[i].item.mergedDay > endDay)
-                pool.splice(i, 1);
-        pool.sort((a, b) => (a.item.mergedDay === b.item.mergedDay
-            ? 0
-            : a.item.mergedDay < b.item.mergedDay
-                ? 1
-                : -1) ||
-            (a.repo < b.repo ? -1 : a.repo > b.repo ? 1 : 0) ||
-            b.item.number - a.item.number);
-        const inWindow = pool.filter((p) => p.item.mergedDay >= windowStart);
-        const sampled = inWindow.length > caps.maxPrs;
-        const chosen = sampled ? evenSample(inWindow, caps.maxPrs) : pool.slice(0, caps.maxPrs);
-        const byRepo = new Map();
-        const bucket = (repo) => {
-            let b = byRepo.get(repo);
-            if (!b)
-                byRepo.set(repo, (b = { repo, prs: 0, reverts: 0, ciGreen: 0 }));
-            return b;
-        };
-        const totals = { prs: 0, reverts: 0, ciGreen: 0, examined: 0 };
-        const spendInputs = [];
-        const prSizes = [];
-        let skippedLarge = 0;
-        let unreadable = 0;
-        for (const { repo, item } of chosen) {
-            // A revert PR is never a candidate: counted from the listing, never read.
-            if (item.reverted) {
-                totals.prs += 1;
-                totals.reverts += 1;
-                bucket(repo).prs += 1;
-                bucket(repo).reverts += 1;
-                continue;
-            }
-            if (stop(budget.block(2)))
-                break;
-            budget.charge(1);
-            const res = await prs.readPr(repo, item, budget.room() + 1);
-            budget.charge((Number.isFinite(res.reads) && res.reads >= 1 ? res.reads : 1) - 1);
-            const overrun = budget.overrun();
-            if (overrun) {
-                stop(overrun);
-                break;
-            }
-            const rec = res.pr;
-            if (!rec) {
-                unreadable += 1;
-                continue;
-            }
-            if (rec.additions + rec.deletions > caps.maxPrSizeLines) {
-                skippedLarge += 1;
-                continue;
-            }
-            totals.prs += 1;
-            totals.examined += 1;
-            bucket(repo).prs += 1;
-            if (rec.ci === "success") {
-                totals.ciGreen += 1;
-                bucket(repo).ciGreen += 1;
-            }
-            prSizes.push({
-                mergedDay: item.mergedDay,
-                lines: rec.additions + rec.deletions,
-                aiAssisted: (rec.tools?.length ?? 0) > 0,
-            });
-            spendInputs.push({
-                additions: rec.additions,
-                deletions: rec.deletions,
-                markText: "",
-                tools: rec.tools,
-            });
-        }
-        const coverage = {
-            complete: stoppedBy === null &&
-                !listingCut &&
-                unreadable === 0 &&
-                reposRead === input.repos.length &&
-                !sampled,
-            stoppedBy: stoppedBy ?? (listingCut ? "read-cap" : null),
-            prsExamined: totals.examined,
-            prsSkippedLarge: skippedLarge,
-            prsUnreadable: unreadable,
-            reposRead,
-            reposTotal: input.repos.length,
-            reads: budget.reads,
-            windowStart,
-            windowEnd: endDay,
-            ...(sampled ? { windowSampledFrom: inWindow.length } : {}),
-        };
-        return {
-            status: "done",
-            result: {
-                coverage,
-                totals,
-                byRepo: [...byRepo.values()],
-                spend: estimateSpend(spendInputs),
-                prSizes,
-            },
-        };
-    }
-    catch (e) {
-        // Reads only; the raw error is dropped and a fixed reason returned.
-        return { status: "withheld", reason: classifyFailure(e) };
-    }
-}
+// Moved to shared/org-scan-core (MNE-9752); vendored at cli/src/vendor/shared/org-scan-core. Re-exported so CLI imports stay put.
+export * from "../../vendor/shared/org-scan-core/scan.js";

package/dist/lib/scan/share.d.ts

@@ -1,20 +1,23 @@
 import type { ScanResult } from "./scan.js";
-export type ShareLevel = "summary" | "full" | "none";
+import type { ShareLevel } from "../../vendor/shared/org-scan-core/report-build.js";
+/** Defined in the shared core (MNE-9752); re-exported for the CLI's callers. */
+export type { ShareLevel };
 /** The level preselected at the prompt (Enter picks it). */
 export declare const DEFAULT_SHARE_LEVEL: ShareLevel;
 export declare const SHARE_OPTIONS: ReadonlyArray<{
     level: ShareLevel;
     label: string;
 }>;
-/** Shown just above the share prompt, so pressing Enter is an informed choice. */
+/** Shown just above the prompt. The full report, repo names included, is emailed whatever is chosen here. */
 export declare const SHARE_DISCLOSURE: string;
 /** Asks the user, with Full preselected. Anything but a recognised answer (cancel, EOF, noise) is "none": fail closed. */
 export declare function promptShareLevel(): Promise<ShareLevel>;
+/** `summary` is the old name for `analytics`; the meaning is unchanged. */
 export declare function parseShareLevel(v: string | undefined): ShareLevel | null;
-/** Who receives the report. Sent only with a non-"none" share level. */
+/** Who receives the report. The runner comes from the Mnemom login; the server resolves the Org Admins. */
 export interface ReportRecipients {
-    runner_email: string;
-    cto_email: string;
+    runner_email?: string;
+    extra_emails: string[];
 }
 export interface SharePayload {
     recipients: ReportRecipients;
@@ -30,6 +33,7 @@ export interface SharePayload {
     coverage_complete: boolean;
     /** Absent when no spend line may be shown. */
     spend_line?: string;
+    /** Present at "full" only. */
     repos?: Array<{
         repo: string;
         prs: number;
@@ -37,6 +41,6 @@ export interface SharePayload {
         ci_green: number;
     }>;
 }
-/** Builds only what the level allows. Never includes authors, titles, branches, bodies or tokens. The only person data is the two report recipients. */
+/** Builds only what the level allows. Never includes authors, titles, branches, bodies or tokens. The only person data is the report recipients. */
 export declare function buildSharePayload(level: Exclude<ShareLevel, "none">, r: ScanResult, recipients: ReportRecipients, spendLine?: string | null): SharePayload;
 export declare function buildSharePayload(level: ShareLevel, r: ScanResult, recipients: ReportRecipients, spendLine?: string | null): SharePayload | null;