@neurcode-ai/cli 0.20.12 → 0.20.14

package/dist/utils/enterprise-dogfood-report.js

@@ -0,0 +1,321 @@
+"use strict";
+/**
+ * Enterprise Repo Dogfood report — pure, source-free builder (Iteration 14).
+ *
+ * Iterations 6-13 proved the runtime against fixtures, sandbox payloads, and
+ * `neurcode verify --ci` timing on real checkouts. Iteration 14 closes the loop
+ * the roadmap actually asks for: drive a *governed cross-file session* on a real,
+ * pinned third-party repository and record — honestly and source-free — whether
+ * the product was useful.
+ *
+ * This module is the deterministic, I/O-free core. It takes a single
+ * already-source-free facts object ({@link DogfoodReportInput}) gathered by the
+ * operator harness (`scripts/enterprise-repo-dogfood-v1.mjs`) and turns it into:
+ *
+ *   1. {@link buildEnterpriseDogfoodReport} — a machine-readable manifest
+ *      (`neurcode.enterprise-dogfood-report.v1`) carrying repo facts, brain index
+ *      metrics, the honest per-tool enforcement posture, structured session
+ *      observations, source-free evidence pointers, and a seven-dimension score.
+ *   2. {@link renderEnterpriseDogfoodReportMarkdown} — the human-readable report.
+ *
+ * Hard rules (shared with utils/enterprise-eval-report.ts + utils/pilot-evidence-pack.ts):
+ *   - Source-free. Only slugs, public OSS identities, paths, owners, counts,
+ *     hashes, verdicts, and durations are read or emitted. We NEVER carry source,
+ *     diffs, patch bodies, raw prompts, secrets, or natural-language intent /
+ *     task / session prose. {@link assertEnterpriseDogfoodSourceFree} is the
+ *     backstop and mirrors the CI leak gate (scripts/source-free-leak-scan.mjs).
+ *   - Honest enforcement. The Enforcement dimension reports the real
+ *     `integrations doctor` posture — a cooperative adapter (e.g. Cursor) is
+ *     advisory, never claimed to be the Claude hook's hard pre-write deny.
+ *   - Honest scope. Scores are operator judgments, each REQUIRING a source-free
+ *     evidence pointer (artifact path + count / hash / duration). A score without
+ *     evidence is rejected at build time.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DOGFOOD_DIMENSION_LABELS = exports.DOGFOOD_SCORE_DIMENSIONS = exports.ENTERPRISE_DOGFOOD_REPORT_SCHEMA_VERSION = void 0;
+exports.assertEnterpriseDogfoodSourceFree = assertEnterpriseDogfoodSourceFree;
+exports.rollupDogfoodVerdict = rollupDogfoodVerdict;
+exports.buildEnterpriseDogfoodReport = buildEnterpriseDogfoodReport;
+exports.renderEnterpriseDogfoodReportMarkdown = renderEnterpriseDogfoodReportMarkdown;
+const enterprise_eval_report_1 = require("./enterprise-eval-report");
+const pilot_evidence_pack_1 = require("./pilot-evidence-pack");
+exports.ENTERPRISE_DOGFOOD_REPORT_SCHEMA_VERSION = 'neurcode.enterprise-dogfood-report.v1';
+// ── Scoring rubric (P0-locked: pass | partial | fail per dimension) ───────────
+/** The seven roadmap score dimensions, in canonical report order. */
+exports.DOGFOOD_SCORE_DIMENSIONS = [
+    'intelligence',
+    'enforcement',
+    'usability',
+    'scalability',
+    'evidence',
+    'privacy',
+    'enterpriseReadiness',
+];
+exports.DOGFOOD_DIMENSION_LABELS = {
+    intelligence: 'Intelligence',
+    enforcement: 'Enforcement',
+    usability: 'Usability',
+    scalability: 'Scalability',
+    evidence: 'Evidence',
+    privacy: 'Privacy',
+    enterpriseReadiness: 'Enterprise readiness',
+};
+const DOGFOOD_REPORT_EXCLUDES = [
+    'source code',
+    'diff hunks',
+    'patch bodies',
+    'raw prompts',
+    'raw chat',
+    'natural-language intent / task text',
+    'session prose',
+    'secrets',
+    'private file contents',
+];
+const DEFAULT_WHAT_THIS_PROVES = [
+    'The Neurcode brain indexed a real, pinned third-party repository and produced a source-free scale / coverage projection.',
+    'A governed cross-file session ran against real code: boundary blocks, exact-path approvals, and neighbor containment were observed (counts only).',
+    'Source-free evidence (pilot evidence pack, AI Change Records, runtime risk classification) was exported with stable content hashes.',
+];
+const DEFAULT_WHAT_THIS_DOES_NOT_PROVE = [
+    'It does not prove the third-party source is correct, secure, or free of vulnerabilities.',
+    'It does not prove the agent "semantically understands" the repository — brain reuse / architecture signals are advisory and can be false positives.',
+    'Enforcement strength depends on the agent: a cooperative adapter (e.g. Cursor) is advisory and can be bypassed — it is NOT the Claude hook\'s hard pre-write deny.',
+    'Scores are operator judgments backed by source-free evidence pointers, not an automated benchmark.',
+];
+const DEFAULT_LIMITATIONS = [
+    'Single operator run on one pinned commit — not a statistical sample.',
+    'Large repositories (e.g. microsoft/TypeScript, apache/airflow) run in the operator / pre-release tier, never in hermetic CI.',
+];
+/**
+ * Source-like / prose key names that must never appear in a shareable dogfood
+ * artifact. Mirrors `SOURCE_LIKE_KEYS` in scripts/source-free-leak-scan.mjs and
+ * `FORBIDDEN_PROSE_KEYS` in utils/pilot-evidence-pack.ts so the builder rejects
+ * exactly what the CI leak gate (`scanJsonPayload`) would flag.
+ */
+const FORBIDDEN_KEYS = new Set([
+    'content',
+    'fileContent',
+    'file_content',
+    'sourceText',
+    'source_text',
+    'sourceCode',
+    'source_code',
+    'diff',
+    'diffText',
+    'diff_text',
+    'patch',
+    'before',
+    'after',
+    'raw_prompt',
+    'body',
+    'hunk',
+    'unifiedDiff',
+    'unified_diff',
+    'command_body',
+    ...pilot_evidence_pack_1.FORBIDDEN_PROSE_KEYS,
+]);
+function findForbiddenKeys(value, path = 'root', out = []) {
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => findForbiddenKeys(item, `${path}[${index}]`, out));
+        return out;
+    }
+    if (value && typeof value === 'object') {
+        for (const [key, child] of Object.entries(value)) {
+            if (FORBIDDEN_KEYS.has(key))
+                out.push(`${path}.${key}`);
+            findForbiddenKeys(child, `${path}.${key}`, out);
+        }
+    }
+    return out;
+}
+/** Throw if a would-be dogfood artifact carries source/diff/secret/prose shapes. */
+function assertEnterpriseDogfoodSourceFree(value, label = 'enterprise-dogfood artifact') {
+    // 1. Shared diff / secret / key string patterns (eval + pilot backstop).
+    (0, enterprise_eval_report_1.assertEnterpriseEvalSourceFree)(value, label);
+    // 2. Source-like / prose key names anywhere in the structure (matches the gate).
+    const offending = findForbiddenKeys(value);
+    if (offending.length > 0) {
+        throw new Error(`${label} contains forbidden source/prose keys: ${offending.join(', ')}`);
+    }
+}
+function rollupDogfoodVerdict(scores) {
+    if (scores.some((s) => s.verdict === 'fail'))
+        return 'fail';
+    if (scores.some((s) => s.verdict === 'partial'))
+        return 'partial';
+    return 'pass';
+}
+function validateScores(scores) {
+    const byDimension = new Map();
+    for (const score of scores) {
+        if (!exports.DOGFOOD_SCORE_DIMENSIONS.includes(score.dimension)) {
+            throw new Error(`unknown dogfood score dimension: ${String(score.dimension)}`);
+        }
+        if (byDimension.has(score.dimension)) {
+            throw new Error(`duplicate dogfood score dimension: ${score.dimension}`);
+        }
+        if (score.verdict !== 'pass' && score.verdict !== 'partial' && score.verdict !== 'fail') {
+            throw new Error(`dimension ${score.dimension} has an invalid verdict: ${String(score.verdict)}`);
+        }
+        if (typeof score.evidence !== 'string' || score.evidence.trim().length === 0) {
+            throw new Error(`dimension ${score.dimension} is missing a source-free evidence pointer`);
+        }
+        byDimension.set(score.dimension, score);
+    }
+    const missing = exports.DOGFOOD_SCORE_DIMENSIONS.filter((d) => !byDimension.has(d));
+    if (missing.length > 0) {
+        throw new Error(`dogfood report is missing score dimension(s): ${missing.join(', ')}`);
+    }
+    // Canonical order so the report and markdown are deterministic.
+    return exports.DOGFOOD_SCORE_DIMENSIONS.map((d) => byDimension.get(d));
+}
+function buildEnterpriseDogfoodReport(input) {
+    const scores = validateScores(input.scores);
+    const scoreSummary = {
+        pass: scores.filter((s) => s.verdict === 'pass').length,
+        partial: scores.filter((s) => s.verdict === 'partial').length,
+        fail: scores.filter((s) => s.verdict === 'fail').length,
+        overall: rollupDogfoodVerdict(scores),
+    };
+    return {
+        schemaVersion: exports.ENTERPRISE_DOGFOOD_REPORT_SCHEMA_VERSION,
+        generatedAt: input.generatedAt,
+        cliVersion: input.cliVersion ?? null,
+        operator: input.operator ?? null,
+        repo: input.repo,
+        brain: input.brain,
+        enforcement: input.enforcement,
+        session: input.session,
+        artifacts: input.artifacts,
+        commandsRun: input.commandsRun,
+        durations: input.durations,
+        scores,
+        scoreSummary,
+        whatThisProves: input.whatThisProves?.length ? input.whatThisProves : DEFAULT_WHAT_THIS_PROVES,
+        whatThisDoesNotProve: input.whatThisDoesNotProve?.length
+            ? input.whatThisDoesNotProve
+            : DEFAULT_WHAT_THIS_DOES_NOT_PROVE,
+        limitations: input.limitations?.length ? input.limitations : DEFAULT_LIMITATIONS,
+        privacy: { sourceFree: true, excludes: DOGFOOD_REPORT_EXCLUDES },
+    };
+}
+// ── Markdown renderer (source-free) ───────────────────────────────────────────
+const VERDICT_GLYPH = {
+    pass: '✓',
+    partial: '~',
+    fail: '✗',
+};
+function formatBytes(bytes) {
+    if (bytes == null)
+        return 'n/a';
+    if (bytes < 1024)
+        return `${bytes} B`;
+    const units = ['KB', 'MB', 'GB', 'TB'];
+    let value = bytes / 1024;
+    let unit = 0;
+    while (value >= 1024 && unit < units.length - 1) {
+        value /= 1024;
+        unit += 1;
+    }
+    return `${value.toFixed(1)} ${units[unit]}`;
+}
+function formatMs(ms) {
+    if (ms == null)
+        return 'n/a';
+    if (ms < 1000)
+        return `${ms} ms`;
+    return `${(ms / 1000).toFixed(1)} s`;
+}
+function renderEnterpriseDogfoodReportMarkdown(report) {
+    const lines = [];
+    lines.push('# Enterprise Repo Dogfood — Report');
+    lines.push('');
+    lines.push(`Generated: ${report.generatedAt}`);
+    lines.push(`CLI: ${report.cliVersion ?? 'n/a'}${report.operator ? ` · Operator: ${report.operator}` : ''}`);
+    lines.push(`Repo: ${report.repo.name} @ ${report.repo.pinnedCommit}${report.repo.ref ? ` (${report.repo.ref})` : ''} · Language: ${report.repo.language} · CI tier: ${report.repo.ciTier}`);
+    lines.push(`Scale: ${report.repo.filesTracked ?? 'n/a'} tracked file(s), ${formatBytes(report.repo.diskBytes)} on disk`);
+    lines.push(`Score: ${report.scoreSummary.pass} pass · ${report.scoreSummary.partial} partial · ${report.scoreSummary.fail} fail — overall ${report.scoreSummary.overall}`);
+    lines.push('');
+    lines.push('## Scores (pass / partial / fail with source-free evidence)');
+    lines.push('');
+    lines.push('| | Dimension | Verdict | Evidence (paths / counts / hashes / durations) |');
+    lines.push('|---|---|---|---|');
+    for (const score of report.scores) {
+        lines.push(`| ${VERDICT_GLYPH[score.verdict]} | ${exports.DOGFOOD_DIMENSION_LABELS[score.dimension]} | ${score.verdict} | ${score.evidence} |`);
+    }
+    lines.push('');
+    lines.push('## Brain index');
+    lines.push('');
+    if (!report.brain.indexed) {
+        lines.push('- Not indexed in this run.');
+    }
+    else {
+        lines.push(`- Files indexed: ${report.brain.filesIndexed ?? 'n/a'} (scanned ${report.brain.filesScanned ?? 'n/a'})`);
+        lines.push(`- Index duration: ${formatMs(report.brain.indexDurationMs)} · readiness ${formatMs(report.brain.readinessDurationMs)}`);
+        lines.push(`- Scale status: ${report.brain.scaleStatus ?? 'n/a'}`);
+        lines.push(`- Storage: ${report.brain.storageBackend ?? 'n/a'}${report.brain.storageFallback ? ' (fallback engaged)' : ''}`);
+        if (report.brain.languageMatrix.length > 0) {
+            lines.push(`- Language matrix: ${report.brain.languageMatrix
+                .map((m) => `${m.language} ${m.files} file(s) [${m.coverageTier}]`)
+                .join('; ')}`);
+        }
+    }
+    lines.push('');
+    lines.push('## Enforcement posture (from `integrations doctor`)');
+    lines.push('');
+    lines.push(`- Agent / adapter: ${report.enforcement.agent}${report.enforcement.adapter ? ` / ${report.enforcement.adapter}` : ''}`);
+    lines.push(`- Guarantee: ${report.enforcement.guaranteeLabel}`);
+    lines.push(`- Enforceable hard deny: ${report.enforcement.enforceable ? 'yes' : 'no'} · Advisory-only (bypassable): ${report.enforcement.advisoryOnly ? 'yes' : 'no'}`);
+    lines.push(`- Method: ${report.enforcement.method}`);
+    lines.push(`- integrations doctor status: ${report.enforcement.integrationsDoctorStatus ?? 'n/a'}`);
+    lines.push('');
+    lines.push('## Governed cross-file session');
+    lines.push('');
+    lines.push(`- Task: ${report.session.task.id} — ${report.session.task.title}`);
+    lines.push(`- Cross-file: ${report.session.task.crossFile ? 'yes' : 'no'} · Expected files: ${report.session.task.expectedFiles ?? 'n/a'} · Governed: ${report.session.governed ? 'yes' : 'no'}`);
+    lines.push(`- Blocks observed: ${report.session.blocksObserved} · Exact approvals: ${report.session.exactApprovals} · Neighbor contained: ${report.session.neighborContained == null ? 'n/a' : report.session.neighborContained ? 'yes' : 'no'}`);
+    lines.push(`- Finish verdict: ${report.session.finishVerdict ?? 'n/a'}`);
+    lines.push(`- Where it helped: ${report.session.helps.map((h) => `${h.label} (${h.count})`).join('; ') || 'none recorded'}`);
+    lines.push(`- Incorrect blocks (false positives): ${report.session.falseBlocks
+        .map((b) => `${b.label} (${b.count}) [${b.pathGlobs.join(', ') || 'no globs'}]`)
+        .join('; ') || 'none recorded'}`);
+    lines.push(`- Developer friction: ${report.session.friction.map((f) => `${f.label} [${f.severity}] (${f.count})`).join('; ') || 'none recorded'}`);
+    lines.push('');
+    lines.push('## Evidence artifacts (source-free pointers)');
+    lines.push('');
+    lines.push(`- Pilot evidence pack: ${report.artifacts.pilotEvidencePack.relativePath ?? 'none'} (hash ${report.artifacts.pilotEvidencePack.contentHash ?? 'n/a'}, ${report.artifacts.pilotEvidencePack.sessionCount ?? 'n/a'} session(s))`);
+    lines.push(`- Brain readiness: ${report.artifacts.brainReadiness.relativePath ?? 'none'} (hash ${report.artifacts.brainReadiness.contentHash ?? 'n/a'})`);
+    lines.push(`- Runtime risk doctor: ${report.artifacts.runtimeRiskDoctor.relativePath ?? 'none'} (verdict ${report.artifacts.runtimeRiskDoctor.verdict ?? 'n/a'}, ${report.artifacts.runtimeRiskDoctor.classifiedPaths ?? 'n/a'} classified path(s))`);
+    lines.push(`- AI Change Records: ${report.artifacts.aiChangeRecords ?? 'n/a'}`);
+    lines.push('');
+    lines.push('## Durations');
+    lines.push('');
+    lines.push(`- Total: ${formatMs(report.durations.totalMs)} · Clone: ${formatMs(report.durations.cloneMs)} · Index: ${formatMs(report.durations.indexMs)} · Session: ${formatMs(report.durations.sessionMs)}`);
+    lines.push('');
+    lines.push('## What this proves');
+    lines.push('');
+    for (const item of report.whatThisProves)
+        lines.push(`- ${item}`);
+    lines.push('');
+    lines.push('## What this does NOT prove');
+    lines.push('');
+    for (const item of report.whatThisDoesNotProve)
+        lines.push(`- ${item}`);
+    lines.push('');
+    lines.push('## Limitations');
+    lines.push('');
+    for (const item of report.limitations)
+        lines.push(`- ${item}`);
+    lines.push('');
+    lines.push('## Commands that were run');
+    lines.push('');
+    lines.push('```');
+    for (const cmd of report.commandsRun)
+        lines.push(cmd);
+    lines.push('```');
+    lines.push('');
+    lines.push(`_Source-free: slugs, public OSS identities, paths, owners, counts, hashes, verdicts, and durations only. Excludes: ${report.privacy.excludes.join(', ')}._`);
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=enterprise-dogfood-report.js.map

package/dist/utils/enterprise-dogfood-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterprise-dogfood-report.js","sourceRoot":"","sources":["../../src/utils/enterprise-dogfood-report.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;;AAyRH,8EAWC;AAED,oDAIC;AA2BD,oEA8BC;AA6BD,sFA6IC;AA3gBD,qEAA0E;AAC1E,+DAA6D;AAEhD,QAAA,wCAAwC,GAAG,uCAAgD,CAAC;AAEzG,iFAAiF;AAEjF,qEAAqE;AACxD,QAAA,wBAAwB,GAAG;IACtC,cAAc;IACd,aAAa;IACb,WAAW;IACX,aAAa;IACb,UAAU;IACV,SAAS;IACT,qBAAqB;CACb,CAAC;AAME,QAAA,wBAAwB,GAA0C;IAC7E,YAAY,EAAE,cAAc;IAC5B,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,mBAAmB,EAAE,sBAAsB;CAC5C,CAAC;AA+KF,MAAM,uBAAuB,GAAG;IAC9B,aAAa;IACb,YAAY;IACZ,cAAc;IACd,aAAa;IACb,UAAU;IACV,qCAAqC;IACrC,eAAe;IACf,SAAS;IACT,uBAAuB;CACxB,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,0HAA0H;IAC1H,mJAAmJ;IACnJ,qIAAqI;CACtI,CAAC;AAEF,MAAM,gCAAgC,GAAG;IACvC,0FAA0F;IAC1F,qJAAqJ;IACrJ,oKAAoK;IACpK,oGAAoG;CACrG,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,sEAAsE;IACtE,8HAA8H;CAC/H,CAAC;AAEF;;;;;GAKG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAS;IAC1D,SAAS;IACT,aAAa;IACb,cAAc;IACd,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,MAAM;IACN,UAAU;IACV,WAAW;IACX,OAAO;IACP,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,MAAM;IACN,MAAM;IACN,aAAa;IACb,cAAc;IACd,cAAc;IACd,GAAG,0CAAoB;CACxB,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAI,GAAG,MAAM,EAAE,MAAgB,EAAE;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAClF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YACxD,iBAAiB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,SAAgB,iCAAiC,CAC/C,KAAc,EACd,KAAK,GAAG,6BAA6B;IAErC,yEAAyE;IACzE,IAAA,uDAA8B,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,iFAAiF;IACjF,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,MAAsB;IACzD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAE,gCAA8C,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,SAAS,4BAA4B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,SAAS,4CAA4C,CAAC,CAAC;QAC5F,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,gCAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,gEAAgE;IAChE,OAAO,gCAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAiB,CAAC,CAAC;AACjF,CAAC;AAED,SAAgB,4BAA4B,CAAC,KAAyB;IACpE,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM;QAC7D,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC;KACtC,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,gDAAwC;QACvD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM;QACN,YAAY;QACZ,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,wBAAwB;QAC9F,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,MAAM;YACtD,CAAC,CAAC,KAAK,CAAC,oBAAoB;YAC5B,CAAC,CAAC,gCAAgC;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB;QAChF,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,uBAAuB,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,aAAa,GAAwC;IACzD,IAAI,EAAE,GAAG;IACT,OAAO,EAAE,GAAG;IACZ,IAAI,EAAE,GAAG;CACV,CAAC;AAEF,SAAS,WAAW,CAAC,KAAoB;IACvC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;IACzB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,EAAiB;IACjC,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,EAAE,KAAK,CAAC;IACjC,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAgB,qCAAqC,CAAC,MAA+B;IACnF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,UAAU,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5G,KAAK,CAAC,IAAI,CACR,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,gBAAgB,MAAM,CAAC,IAAI,CAAC,QAAQ,eAAe,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAChL,CAAC;IACF,KAAK,CAAC,IAAI,CACR,UAAU,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,KAAK,qBAAqB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAC7G,CAAC;IACF,KAAK,CAAC,IAAI,CACR,UAAU,MAAM,CAAC,YAAY,CAAC,IAAI,WAAW,MAAM,CAAC,YAAY,CAAC,OAAO,cAAc,MAAM,CAAC,YAAY,CAAC,IAAI,mBAAmB,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAC/J,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACR,KAAK,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,gCAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,OAAO,MAAM,KAAK,CAAC,QAAQ,IAAI,CAC5H,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,aAAa,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,GAAG,CAAC,CAAC;QACrH,KAAK,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,gBAAgB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACpI,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CACR,cAAc,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,CACjH,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CACR,sBAAsB,MAAM,CAAC,KAAK,CAAC,cAAc;iBAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,YAAY,GAAG,CAAC;iBAClE,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,WAAW,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpI,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CACR,4BAA4B,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,kCAAkC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAC5J,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,WAAW,CAAC,wBAAwB,IAAI,KAAK,EAAE,CAAC,CAAC;IACpG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CACR,iBAAiB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,sBAAsB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,KAAK,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CACtL,CAAC;IACF,KAAK,CAAC,IAAI,CACR,sBAAsB,MAAM,CAAC,OAAO,CAAC,cAAc,uBAAuB,MAAM,CAAC,OAAO,CAAC,cAAc,0BACrG,MAAM,CAAC,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAChG,EAAE,CACH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CACR,sBAAsB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CACjH,CAAC;IACF,KAAK,CAAC,IAAI,CACR,yCACE,MAAM,CAAC,OAAO,CAAC,WAAW;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,GAAG,CAAC;SAC/E,IAAI,CAAC,IAAI,CAAC,IAAI,eACnB,EAAE,CACH,CAAC;IACF,KAAK,CAAC,IAAI,CACR,yBACE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAC9F,EAAE,CACH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,0BAA0B,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY,IAAI,MAAM,UACjF,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,WAAW,IAAI,KACpD,KAAK,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY,IAAI,KAAK,cAAc,CAC5E,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,YAAY,IAAI,MAAM,UAAU,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,WAAW,IAAI,KAAK,GAAG,CAAC,CAAC;IAC1J,KAAK,CAAC,IAAI,CACR,0BAA0B,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY,IAAI,MAAM,aACjF,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,IAAI,KAChD,KAAK,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,eAAe,IAAI,KAAK,sBAAsB,CACvF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,SAAS,CAAC,eAAe,IAAI,KAAK,EAAE,CAAC,CAAC;IAChF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,YAAY,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAClM,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,oBAAoB;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CACR,sHAAsH,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAChJ,IAAI,CACL,IAAI,CACN,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/utils/runtime-privacy.d.ts

@@ -1,8 +1,23 @@
 import { type GovernanceSession, type IntentRedactionReasonCode, type IntentSummaryV1 } from '@neurcode-ai/governance-runtime';
+import { type RepoIntelligenceEvidence } from '@neurcode-ai/contracts';
 export declare const RUNTIME_CLOUD_SESSION_SCHEMA_VERSION: "neurcode.runtime-cloud-session.v1";
 export declare const RUNTIME_LIVE_SESSION_SCHEMA_VERSION: "neurcode.runtime-live-session.v3";
 type UnknownRecord = Record<string, unknown>;
 export declare function buildRuntimeIntentSummary(session: GovernanceSession, classification?: 'cloud_safe' | 'shareable'): IntentSummaryV1;
+/**
+ * Project a local `RepoIntelligenceEvidence` object into a source-free, depth-bounded form
+ * safe to attach at the SESSION level of a cloud runtime payload. Returns null when the input
+ * is not valid evidence or the bounded projection would still fail the cloud privacy gate —
+ * in that case the session uploads WITHOUT repo-intelligence rather than failing the whole
+ * upload (fail-safe: omit, never leak, never block other evidence).
+ *
+ * Source-freeness is structural (the producer already emits no source). This projection
+ * additionally drops the deep `matchedFacts`/`related` arrays (depth 9+ even at session
+ * level, and they carry path/symbol labels) and bounds every array/string. `graph.summary`
+ * (languages, package/service names, counts) IS retained — it is depth-safe at session level
+ * and powers the dashboard's language-coverage and graph-posture panels.
+ */
+export declare function projectRepoIntelligenceForCloud(value: unknown): RepoIntelligenceEvidence | null;
 export declare function buildCloudSafeRuntimeSession(session: GovernanceSession): UnknownRecord;
 export declare function projectRuntimePayloadForCloud(payload: UnknownRecord): UnknownRecord;
 export declare function runtimePrivacySchemaVersions(): string[];

package/dist/utils/runtime-privacy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-privacy.d.ts","sourceRoot":"","sources":["../../src/utils/runtime-privacy.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,iBAAiB,EAEtB,KAAK,yBAAyB,EAC9B,KAAK,eAAe,EAErB,MAAM,iCAAiC,CAAC;AAEzC,eAAO,MAAM,oCAAoC,EAAG,mCAA4C,CAAC;AACjG,eAAO,MAAM,mCAAmC,EAAG,kCAA2C,CAAC;AAE/F,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA+F7C,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,EAC1B,cAAc,GAAE,YAAY,GAAG,WAA0B,GACxD,eAAe,CAqBjB;AAqHD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,iBAAiB,GAAG,aAAa,CA0DtF;AA8BD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAwBnF;AAED,wBAAgB,4BAA4B,IAAI,MAAM,EAAE,CAOvD;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,EAAE,CA2BvF"}
+{"version":3,"file":"runtime-privacy.d.ts","sourceRoot":"","sources":["../../src/utils/runtime-privacy.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,iBAAiB,EAEtB,KAAK,yBAAyB,EAC9B,KAAK,eAAe,EAErB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oCAAoC,EAAG,mCAA4C,CAAC;AACjG,eAAO,MAAM,mCAAmC,EAAG,kCAA2C,CAAC;AAE/F,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA+F7C,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,EAC1B,cAAc,GAAE,YAAY,GAAG,WAA0B,GACxD,eAAe,CAqBjB;AA2CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,GAAG,IAAI,CA6G/F;AA0HD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,iBAAiB,GAAG,aAAa,CA+DtF;AA8BD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAwBnF;AAED,wBAAgB,4BAA4B,IAAI,MAAM,EAAE,CAOvD;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,EAAE,CA2BvF"}

package/dist/utils/runtime-privacy.js

@@ -2,11 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RUNTIME_LIVE_SESSION_SCHEMA_VERSION = exports.RUNTIME_CLOUD_SESSION_SCHEMA_VERSION = void 0;
 exports.buildRuntimeIntentSummary = buildRuntimeIntentSummary;
+exports.projectRepoIntelligenceForCloud = projectRepoIntelligenceForCloud;
 exports.buildCloudSafeRuntimeSession = buildCloudSafeRuntimeSession;
 exports.projectRuntimePayloadForCloud = projectRuntimePayloadForCloud;
 exports.runtimePrivacySchemaVersions = runtimePrivacySchemaVersions;
 exports.privacyReasonCodesFromError = privacyReasonCodesFromError;
 const governance_runtime_1 = require("@neurcode-ai/governance-runtime");
+const contracts_1 = require("@neurcode-ai/contracts");
 exports.RUNTIME_CLOUD_SESSION_SCHEMA_VERSION = 'neurcode.runtime-cloud-session.v1';
 exports.RUNTIME_LIVE_SESSION_SCHEMA_VERSION = 'neurcode.runtime-live-session.v3';
 function asRecord(value) {
@@ -134,6 +136,162 @@ function eventReasonCodes(event) {
         reasons.add(blockType);
     return Array.from(reasons).sort((left, right) => left.localeCompare(right)).slice(0, 12);
 }
+// Bounds for one session-level cloud repo-intelligence projection. One evidence object per
+// session (the latest) is node-cheap, so these caps exist for tidy payloads rather than to
+// fit the aggregate node budget.
+const MAX_CLOUD_FINDINGS = 25;
+const MAX_CLOUD_ADVISORY = 25;
+const MAX_CLOUD_RULE_IDS = 64;
+const MAX_CLOUD_SUMMARY_ITEMS = 100;
+const MAX_EVIDENCE_TEXT = 280;
+function boundedStringList(value, maxItems, maxLength = 160) {
+    if (!Array.isArray(value))
+        return [];
+    const out = [];
+    for (const item of value) {
+        const cleaned = stringValue(item, maxLength);
+        if (cleaned)
+            out.push(cleaned);
+        if (out.length >= maxItems)
+            break;
+    }
+    return out;
+}
+const ABSOLUTE_PATH_VALUE = /(?:^|[^A-Za-z0-9_-])(?:\/(?:Users|home|private|tmp|var|etc|root|Volumes|opt|usr|workspace|app)\/[^\s"'`)]+|[A-Za-z]:[\\/][^\s"'`)]+|\\\\[A-Za-z0-9._-]+[\\/][^\s"'`)]+)/;
+function hasAbsolutePathValue(value) {
+    if (typeof value === 'string')
+        return ABSOLUTE_PATH_VALUE.test(value.normalize('NFKC'));
+    if (Array.isArray(value))
+        return value.some((item) => hasAbsolutePathValue(item));
+    if (!value || typeof value !== 'object')
+        return false;
+    return Object.values(value).some((child) => hasAbsolutePathValue(child));
+}
+/**
+ * Project a local `RepoIntelligenceEvidence` object into a source-free, depth-bounded form
+ * safe to attach at the SESSION level of a cloud runtime payload. Returns null when the input
+ * is not valid evidence or the bounded projection would still fail the cloud privacy gate —
+ * in that case the session uploads WITHOUT repo-intelligence rather than failing the whole
+ * upload (fail-safe: omit, never leak, never block other evidence).
+ *
+ * Source-freeness is structural (the producer already emits no source). This projection
+ * additionally drops the deep `matchedFacts`/`related` arrays (depth 9+ even at session
+ * level, and they carry path/symbol labels) and bounds every array/string. `graph.summary`
+ * (languages, package/service names, counts) IS retained — it is depth-safe at session level
+ * and powers the dashboard's language-coverage and graph-posture panels.
+ */
+function projectRepoIntelligenceForCloud(value) {
+    if (!(0, contracts_1.isRepoIntelligenceEvidence)(value))
+        return null;
+    const evidence = value;
+    const graph = evidence.graph;
+    const freshness = graph.freshness;
+    const projected = {
+        schemaVersion: evidence.schemaVersion,
+        evidenceId: stringValue(evidence.evidenceId, 200) ?? evidence.evidenceId,
+        generatedAt: evidence.generatedAt,
+        classification: evidence.classification,
+        verdict: evidence.verdict,
+        enforcement: {
+            adapterId: stringValue(evidence.enforcement.adapterId, 120) ?? evidence.enforcement.adapterId,
+            capability: evidence.enforcement.capability,
+            timing: evidence.enforcement.timing,
+            decisionBinding: evidence.enforcement.decisionBinding,
+        },
+        graph: {
+            graphId: graph.graphId,
+            schemaVersion: graph.schemaVersion,
+            ...(graph.canonicalModel ? { canonicalModel: graph.canonicalModel } : {}),
+            storageSchemaVersion: graph.storageSchemaVersion ?? null,
+            freshness: {
+                state: freshness.state,
+                ...(freshness.posture ? { posture: freshness.posture } : {}),
+                indexedAt: freshness.indexedAt,
+                gitHead: freshness.gitHead,
+                workingTreeHash: freshness.workingTreeHash,
+                staleFileCount: freshness.staleFileCount,
+                unsupportedFileCount: freshness.unsupportedFileCount,
+                reasonCodes: boundedStringList(freshness.reasonCodes, 32, 128),
+            },
+            lastSuccessfulIndexAt: graph.lastSuccessfulIndexAt ?? null,
+            lastAttemptedIndexAt: graph.lastAttemptedIndexAt ?? null,
+            unsupportedPercent: graph.unsupportedPercent,
+            coverage: graph.coverage ?? null,
+            ...(graph.deterministicEvidenceEligible !== undefined
+                ? { deterministicEvidenceEligible: graph.deterministicEvidenceEligible } : {}),
+            ...(graph.deterministicEnforcementEligible !== undefined
+                ? { deterministicEnforcementEligible: graph.deterministicEnforcementEligible } : {}),
+            enforcementIneligibilityReasons: boundedStringList(graph.enforcementIneligibilityReasons, 64, 128),
+            ...(graph.recoveryCommand ? { recoveryCommand: graph.recoveryCommand } : {}),
+            ...(graph.runtimeCompatibility ? { runtimeCompatibility: graph.runtimeCompatibility } : {}),
+            ...(graph.summary ? {
+                summary: {
+                    languages: graph.summary.languages.slice(0, 64).map((language) => ({
+                        language: language.language,
+                        depth: language.depth,
+                        filesSeen: language.filesSeen,
+                        filesAnalyzed: language.filesAnalyzed,
+                        filesUnsupported: language.filesUnsupported,
+                    })),
+                    packages: boundedStringList(graph.summary.packages, MAX_CLOUD_SUMMARY_ITEMS, 200),
+                    services: boundedStringList(graph.summary.services, MAX_CLOUD_SUMMARY_ITEMS, 200),
+                    ownershipZoneCount: graph.summary.ownershipZoneCount,
+                    sensitiveSurfaceCount: graph.summary.sensitiveSurfaceCount,
+                },
+            } : {}),
+            // DROP graph.coverageAuthority and graph.relationshipAuthority (unbounded nested depth,
+            // not read by the cloud API or dashboard).
+        },
+        policy: {
+            evaluatedRuleIds: boundedStringList(evidence.policy.evaluatedRuleIds, MAX_CLOUD_RULE_IDS, 200),
+            notEvaluatedRuleIds: boundedStringList(evidence.policy.notEvaluatedRuleIds, MAX_CLOUD_RULE_IDS, 200),
+            findings: evidence.policy.findings.slice(0, MAX_CLOUD_FINDINGS).map((finding) => ({
+                findingId: stringValue(finding.findingId, 160) ?? finding.findingId,
+                ruleId: stringValue(finding.ruleId, 200) ?? finding.ruleId,
+                family: finding.family,
+                verdict: finding.verdict,
+                truth: finding.truth,
+                // matchedFacts carry repo-relative path + symbol labels and nest to depth 9 even at
+                // session level. Drop the contents; the rule id + explanation/remediation remain.
+                matchedFacts: [],
+                explanation: stringValue(finding.explanation, MAX_EVIDENCE_TEXT) ?? '',
+                remediation: stringValue(finding.remediation, MAX_EVIDENCE_TEXT) ?? '',
+            })),
+        },
+        advisory: evidence.advisory.slice(0, MAX_CLOUD_ADVISORY).map((finding) => ({
+            schemaVersion: finding.schemaVersion,
+            findingId: stringValue(finding.findingId, 160) ?? finding.findingId,
+            providerId: stringValue(finding.providerId, 120) ?? finding.providerId,
+            category: finding.category,
+            truth: finding.truth,
+            confidence: finding.confidence,
+            rationaleCategories: boundedStringList(finding.rationaleCategories, 16, 80),
+            // related[] carries path/symbol labels + extra depth; drop for the cloud projection.
+            related: [],
+            limitations: boundedStringList(finding.limitations, 16, 160),
+            suppressed: finding.suppressed,
+            cacheKey: stringValue(finding.cacheKey, 120) ?? finding.cacheKey,
+        })),
+        signature: {
+            trust: evidence.signature.trust,
+            receiptId: evidence.signature.receiptId,
+            recordHash: evidence.signature.recordHash,
+        },
+        privacy: (0, contracts_1.sourceFreePrivacyContract)(),
+    };
+    // The projection must independently satisfy the shape contract and the cloud privacy gate
+    // at the DEEPEST real nesting (`body.sessions[i].repoIntelligence`, the bulk evidence
+    // upload). If either fails, omit it so a single oversized evaluation never fail-closes the
+    // whole session upload.
+    if (!(0, contracts_1.isRepoIntelligenceEvidence)(projected))
+        return null;
+    const gate = (0, governance_runtime_1.validatePrivacySafeCloudPayload)({ sessions: [{ repoIntelligence: projected }] });
+    if (!gate.ok)
+        return null;
+    if (hasAbsolutePathValue(projected))
+        return null;
+    return projected;
+}
 function cloudSafeEvent(event) {
     const detail = asRecord(event.detail);
     const approvalContext = asRecord(detail?.approvalContext);
@@ -169,6 +327,24 @@ function cloudSafeEvent(event) {
         result.detail = compactDetail;
     return result;
 }
+/**
+ * The most recent source-free repo-intelligence evidence produced during the session, as a
+ * bounded cloud projection. Attached at the SESSION level (not per-event) because the cloud
+ * privacy gate's depth budget (MAX_CLOUD_DEPTH) cannot accommodate a structured evidence
+ * object nested under `sessions[i].events[j].detail`. The cloud ingestion re-associates this
+ * with the latest governed check event so the per-event evidence query still resolves it.
+ */
+function latestCloudRepoIntelligence(session) {
+    for (let index = session.events.length - 1; index >= 0; index -= 1) {
+        const candidate = asRecord(asRecord(session.events[index].detail)?.repoIntelligence);
+        if (!candidate)
+            continue;
+        const projected = projectRepoIntelligenceForCloud(candidate);
+        if (projected)
+            return projected;
+    }
+    return null;
+}
 function architectureSummary(session) {
     const obligations = session.contract.architectureObligations ?? [];
     return {
@@ -231,6 +407,7 @@ function scopeAuthoritySummary(session) {
 }
 function buildCloudSafeRuntimeSession(session) {
     const events = session.events.slice(-80).map(cloudSafeEvent);
+    const repoIntelligence = latestCloudRepoIntelligence(session);
     const safe = {
         schemaVersion: session.schemaVersion,
         cloudSchemaVersion: exports.RUNTIME_CLOUD_SESSION_SCHEMA_VERSION,
@@ -258,6 +435,10 @@ function buildCloudSafeRuntimeSession(session) {
             ruleIds: Array.from(new Set(session.contract.architectureObligations?.map((item) => item.id).filter(Boolean) ?? [])).sort().slice(0, 64),
         },
         events,
+        // Source-free latest repo-intelligence evidence for this session, if any. Session-level
+        // placement keeps it within the cloud privacy depth budget; the cloud ingestion attaches
+        // it to the latest governed check event so the per-event evidence query resolves it.
+        ...(repoIntelligence ? { repoIntelligence } : {}),
         livePayload: {
             schemaVersion: exports.RUNTIME_LIVE_SESSION_SCHEMA_VERSION,
             compacted: true,