@neurcode-ai/contracts 0.2.3 → 0.2.4

package/dist/manager-evidence/index.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * Manager Evidence Dashboard - source-free aggregate contract.
+ *
+ * Org-scoped rollup of runtime governance value for engineering managers.
+ * Only paths, owners, hashes, counts, reason codes, verdicts, timestamps, and
+ * tenant ids are permitted. No source, prompts, diffs, secrets, or raw user
+ * identities. Actor identifiers are always hashed/prefix form.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MANAGER_EVIDENCE_ALLOWED_FIELDS = exports.MANAGER_EVIDENCE_RISK_FAMILIES = exports.MANAGER_EVIDENCE_SUMMARY_SCHEMA_VERSION = void 0;
+exports.isManagerEvidenceRiskFamily = isManagerEvidenceRiskFamily;
+exports.MANAGER_EVIDENCE_SUMMARY_SCHEMA_VERSION = 'neurcode.manager-evidence-summary.v1';
+/**
+ * Risk families surfaced to managers. Mirrors `RuntimeSafetyFamily` in
+ * `@neurcode-ai/governance-runtime`; kept as a local copy so `contracts`
+ * remains a dependency-free leaf package. Keep in sync if the kernel families
+ * change.
+ */
+exports.MANAGER_EVIDENCE_RISK_FAMILIES = [
+    'runtime_scope',
+    'sensitive_surface',
+    'credential_or_secret',
+    'dependency_supply_chain',
+    'auth_rbac_boundary',
+    'migration_data_boundary',
+    'infra_deploy_boundary',
+    'test_or_verification_gap',
+    'plan_drift',
+    'approval_required_boundary',
+];
+function isManagerEvidenceRiskFamily(value) {
+    return (typeof value === 'string' &&
+        exports.MANAGER_EVIDENCE_RISK_FAMILIES.includes(value));
+}
+/**
+ * Source-free allowlist of field names that may appear in any manager-evidence
+ * payload. Used by the authority harness / leak scan to assert no source-like
+ * keys leak into the aggregate.
+ */
+exports.MANAGER_EVIDENCE_ALLOWED_FIELDS = [
+    'schemaVersion',
+    'generatedAt',
+    'organizationId',
+    'tier',
+    'window',
+    'since',
+    'until',
+    'appliedFilters',
+    'available',
+    'reason',
+    'repoKey',
+    'riskFamily',
+    'actor',
+    'team',
+    'scope',
+    'repos',
+    'sessions',
+    'activeSessions',
+    'finishedSessions',
+    'owners',
+    'attempts',
+    'totalChecks',
+    'allowedEdits',
+    'allowedWithAdvisories',
+    'blocked',
+    'total',
+    'byFamily',
+    'family',
+    'count',
+    'topPaths',
+    'path',
+    'topOwners',
+    'owner',
+    'approvals',
+    'granted',
+    'boundariesTouched',
+    'boundary',
+    'planDrift',
+    'sessionsWithDrift',
+    'dependencyChanges',
+    'governed',
+    'byKind',
+    'kind',
+    'credentialBlocksLocal',
+    'note',
+    'neighborContainment',
+    'sessionsWithContainedDenials',
+    'byRepo',
+    'sourceFree',
+    'sourceUploaded',
+    'localOnly',
+    'synced',
+    'privacy',
+    'uploadedFields',
+];
+//# sourceMappingURL=index.js.map

package/dist/manager-evidence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/manager-evidence/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AA0BH,kEAKC;AA7BY,QAAA,uCAAuC,GAClD,sCAA+C,CAAC;AAElD;;;;;GAKG;AACU,QAAA,8BAA8B,GAAG;IAC5C,eAAe;IACf,mBAAmB;IACnB,sBAAsB;IACtB,yBAAyB;IACzB,oBAAoB;IACpB,yBAAyB;IACzB,uBAAuB;IACvB,0BAA0B;IAC1B,YAAY;IACZ,4BAA4B;CACpB,CAAC;AAIX,SAAgB,2BAA2B,CAAC,KAAc;IACxD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,sCAAoD,CAAC,QAAQ,CAAC,KAAK,CAAC,CACtE,CAAC;AACJ,CAAC;AASD;;;;GAIG;AACU,QAAA,+BAA+B,GAAG;IAC7C,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,kBAAkB;IAClB,QAAQ;IACR,UAAU;IACV,aAAa;IACb,cAAc;IACd,uBAAuB;IACvB,SAAS;IACT,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;IACN,WAAW;IACX,OAAO;IACP,WAAW;IACX,SAAS;IACT,mBAAmB;IACnB,UAAU;IACV,WAAW;IACX,mBAAmB;IACnB,mBAAmB;IACnB,UAAU;IACV,QAAQ;IACR,MAAM;IACN,uBAAuB;IACvB,MAAM;IACN,qBAAqB;IACrB,8BAA8B;IAC9B,QAAQ;IACR,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,SAAS;IACT,gBAAgB;CACR,CAAC"}

package/dist/pilot-funnel/index.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Self-Serve Pilot Operating System — source-free funnel contract.
+ *
+ * Machine-readable milestone model for signup → governed value → manager review.
+ * No hardcoded repository paths, languages, teams, or billing directories.
+ */
+export declare const PILOT_FUNNEL_SCHEMA_VERSION: "neurcode.pilot-funnel.v1";
+/** Privacy-safe activation milestones tracked across dashboard, API, and CLI. */
+export declare const PILOT_ACTIVATION_MILESTONES: readonly ["signup_completed", "workspace_selected", "organization_created", "organization_joined", "repository_connected", "cli_authenticated", "brain_not_started", "brain_discovering", "brain_parsing", "brain_indexing", "brain_ready", "brain_partial", "brain_stale", "brain_corrupt", "brain_canceled", "brain_failed", "agent_configured", "governed_session_started", "first_block_observed", "first_exact_approval", "first_completed_ai_change_record", "teammate_invited", "seven_day_return"];
+export type PilotActivationMilestone = (typeof PILOT_ACTIVATION_MILESTONES)[number];
+/** Ordered funnel stages a first-time user traverses. */
+export declare const PILOT_FUNNEL_STAGES: readonly [{
+    readonly id: "account";
+    readonly label: "Account";
+    readonly milestones: readonly ["signup_completed"];
+    readonly nextAction: "Choose personal workspace or create/join an organization.";
+}, {
+    readonly id: "workspace";
+    readonly label: "Workspace";
+    readonly milestones: readonly ["workspace_selected", "organization_created", "organization_joined"];
+    readonly nextAction: "Connect a repository and select your AI agent.";
+}, {
+    readonly id: "repository";
+    readonly label: "Repository & agent";
+    readonly milestones: readonly ["repository_connected", "cli_authenticated", "agent_configured"];
+    readonly nextAction: "Index repository Brain and start a governed session.";
+}, {
+    readonly id: "brain";
+    readonly label: "Repository Brain";
+    readonly milestones: readonly ["brain_not_started", "brain_discovering", "brain_parsing", "brain_indexing", "brain_ready", "brain_partial", "brain_stale", "brain_corrupt", "brain_canceled", "brain_failed"];
+    readonly nextAction: "Run the repository-native evaluation to prove governed value.";
+}, {
+    readonly id: "governance";
+    readonly label: "Governed value";
+    readonly milestones: readonly ["governed_session_started", "first_block_observed", "first_exact_approval", "first_completed_ai_change_record"];
+    readonly nextAction: "Review evidence in the manager dashboard or invite a teammate.";
+}, {
+    readonly id: "team";
+    readonly label: "Team & retention";
+    readonly milestones: readonly ["teammate_invited", "seven_day_return"];
+    readonly nextAction: "Continue pilot rollout across repositories.";
+}];
+export type PilotFunnelStageId = (typeof PILOT_FUNNEL_STAGES)[number]['id'];
+/** Brain lifecycle states exposed to operators (maps CLI brain-lifecycle.v2). */
+export declare const PILOT_BRAIN_STATES: readonly ["not_started", "discovering", "parsing", "indexing", "ready", "partial", "stale", "corrupt", "canceled", "failed"];
+export type PilotBrainState = (typeof PILOT_BRAIN_STATES)[number];
+/** Map CLI brain-lifecycle state to pilot Brain state vocabulary. */
+export declare function mapBrainLifecycleToPilotState(input: {
+    lifecycleState?: string | null;
+    progressPhase?: string | null;
+}): PilotBrainState;
+export declare function brainStateToMilestone(state: PilotBrainState): PilotActivationMilestone;
+export type PilotEnforcementPosture = 'hard_pre_write_deny' | 'cooperative_supervision' | 'post_pr_advisory' | 'unsupported';
+export interface PilotHostCapability {
+    agent: string;
+    enforcementPosture: PilotEnforcementPosture;
+    automatic: boolean;
+    description: string;
+}
+export interface PilotFunnelStageProgress {
+    stageId: PilotFunnelStageId;
+    label: string;
+    complete: boolean;
+    currentMilestone: PilotActivationMilestone | null;
+    nextAction: string;
+}
+export interface PilotFunnelState {
+    schemaVersion: typeof PILOT_FUNNEL_SCHEMA_VERSION;
+    organizationId: string;
+    userIdPrefix: string;
+    completedMilestones: PilotActivationMilestone[];
+    currentStage: PilotFunnelStageId;
+    stages: PilotFunnelStageProgress[];
+    progressPercent: number;
+    failureReasonCodes: string[];
+    updatedAt: string;
+}
+export interface PilotRecoveryAction {
+    code: string;
+    label: string;
+    command: string;
+    safeLocalSource: boolean;
+}
+export interface PilotFailureRecovery {
+    whatFailed: string;
+    reasonCode: string;
+    safeLocalSource: boolean;
+    recommendedAction: PilotRecoveryAction;
+    diagnosticExportCommand: string;
+}
+/** Source-free fields allowed in activation analytics payloads. */
+export declare const PILOT_ANALYTICS_ALLOWED_FIELDS: readonly ["milestone", "reasonCode", "stageId", "agent", "enforcementPosture", "brainState", "workspaceKind", "durationMs", "attempt"];
+export declare function isPilotActivationMilestone(value: unknown): value is PilotActivationMilestone;
+export declare function resolveCurrentFunnelStage(completed: ReadonlySet<PilotActivationMilestone>): PilotFunnelStageId;
+export declare function buildFunnelStageProgress(completed: ReadonlySet<PilotActivationMilestone>): PilotFunnelStageProgress[];
+//# sourceMappingURL=index.d.ts.map

package/dist/pilot-funnel/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pilot-funnel/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,2BAA2B,EAAG,0BAAmC,CAAC;AAE/E,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,4eAwB9B,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,yDAAyD;AACzD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqDtB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAE5E,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,8HAWrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,qEAAqE;AACrE,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GAAG,eAAe,CAoBlB;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,eAAe,GAAG,wBAAwB,CAatF;AAED,MAAM,MAAM,uBAAuB,GAC/B,qBAAqB,GACrB,yBAAyB,GACzB,kBAAkB,GAClB,aAAa,CAAC;AAElB,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,uBAAuB,CAAC;IAC5C,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAClD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,2BAA2B,CAAC;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,wBAAwB,EAAE,CAAC;IAChD,YAAY,EAAE,kBAAkB,CAAC;IACjC,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,mBAAmB,CAAC;IACvC,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,mEAAmE;AACnE,eAAO,MAAM,8BAA8B,wIAUjC,CAAC;AAEX,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAE5F;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,WAAW,CAAC,wBAAwB,CAAC,GAC/C,kBAAkB,CAwBpB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,WAAW,CAAC,wBAAwB,CAAC,GAC/C,wBAAwB,EAAE,CAuB5B"}

package/dist/pilot-funnel/index.js

@@ -0,0 +1,227 @@
+"use strict";
+/**
+ * Self-Serve Pilot Operating System — source-free funnel contract.
+ *
+ * Machine-readable milestone model for signup → governed value → manager review.
+ * No hardcoded repository paths, languages, teams, or billing directories.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PILOT_ANALYTICS_ALLOWED_FIELDS = exports.PILOT_BRAIN_STATES = exports.PILOT_FUNNEL_STAGES = exports.PILOT_ACTIVATION_MILESTONES = exports.PILOT_FUNNEL_SCHEMA_VERSION = void 0;
+exports.mapBrainLifecycleToPilotState = mapBrainLifecycleToPilotState;
+exports.brainStateToMilestone = brainStateToMilestone;
+exports.isPilotActivationMilestone = isPilotActivationMilestone;
+exports.resolveCurrentFunnelStage = resolveCurrentFunnelStage;
+exports.buildFunnelStageProgress = buildFunnelStageProgress;
+exports.PILOT_FUNNEL_SCHEMA_VERSION = 'neurcode.pilot-funnel.v1';
+/** Privacy-safe activation milestones tracked across dashboard, API, and CLI. */
+exports.PILOT_ACTIVATION_MILESTONES = [
+    'signup_completed',
+    'workspace_selected',
+    'organization_created',
+    'organization_joined',
+    'repository_connected',
+    'cli_authenticated',
+    'brain_not_started',
+    'brain_discovering',
+    'brain_parsing',
+    'brain_indexing',
+    'brain_ready',
+    'brain_partial',
+    'brain_stale',
+    'brain_corrupt',
+    'brain_canceled',
+    'brain_failed',
+    'agent_configured',
+    'governed_session_started',
+    'first_block_observed',
+    'first_exact_approval',
+    'first_completed_ai_change_record',
+    'teammate_invited',
+    'seven_day_return',
+];
+/** Ordered funnel stages a first-time user traverses. */
+exports.PILOT_FUNNEL_STAGES = [
+    {
+        id: 'account',
+        label: 'Account',
+        milestones: ['signup_completed'],
+        nextAction: 'Choose personal workspace or create/join an organization.',
+    },
+    {
+        id: 'workspace',
+        label: 'Workspace',
+        milestones: ['workspace_selected', 'organization_created', 'organization_joined'],
+        nextAction: 'Connect a repository and select your AI agent.',
+    },
+    {
+        id: 'repository',
+        label: 'Repository & agent',
+        milestones: ['repository_connected', 'cli_authenticated', 'agent_configured'],
+        nextAction: 'Index repository Brain and start a governed session.',
+    },
+    {
+        id: 'brain',
+        label: 'Repository Brain',
+        milestones: [
+            'brain_not_started',
+            'brain_discovering',
+            'brain_parsing',
+            'brain_indexing',
+            'brain_ready',
+            'brain_partial',
+            'brain_stale',
+            'brain_corrupt',
+            'brain_canceled',
+            'brain_failed',
+        ],
+        nextAction: 'Run the repository-native evaluation to prove governed value.',
+    },
+    {
+        id: 'governance',
+        label: 'Governed value',
+        milestones: [
+            'governed_session_started',
+            'first_block_observed',
+            'first_exact_approval',
+            'first_completed_ai_change_record',
+        ],
+        nextAction: 'Review evidence in the manager dashboard or invite a teammate.',
+    },
+    {
+        id: 'team',
+        label: 'Team & retention',
+        milestones: ['teammate_invited', 'seven_day_return'],
+        nextAction: 'Continue pilot rollout across repositories.',
+    },
+];
+/** Brain lifecycle states exposed to operators (maps CLI brain-lifecycle.v2). */
+exports.PILOT_BRAIN_STATES = [
+    'not_started',
+    'discovering',
+    'parsing',
+    'indexing',
+    'ready',
+    'partial',
+    'stale',
+    'corrupt',
+    'canceled',
+    'failed',
+];
+/** Map CLI brain-lifecycle state to pilot Brain state vocabulary. */
+function mapBrainLifecycleToPilotState(input) {
+    const lifecycle = input.lifecycleState ?? 'missing';
+    const phase = input.progressPhase ?? null;
+    if (lifecycle === 'missing')
+        return 'not_started';
+    if (lifecycle === 'scheduled')
+        return 'discovering';
+    if (lifecycle === 'building') {
+        if (phase === 'discovering' || phase === 'scanning')
+            return 'discovering';
+        if (phase === 'parsing')
+            return 'parsing';
+        return 'indexing';
+    }
+    if (lifecycle === 'fresh')
+        return 'ready';
+    if (lifecycle === 'partial')
+        return 'partial';
+    if (lifecycle === 'stale')
+        return 'stale';
+    if (lifecycle === 'failed') {
+        if (input.progressPhase === 'cancelled_by_operator')
+            return 'canceled';
+        return 'failed';
+    }
+    if (lifecycle === 'unsupported')
+        return 'partial';
+    return 'corrupt';
+}
+function brainStateToMilestone(state) {
+    switch (state) {
+        case 'not_started': return 'brain_not_started';
+        case 'discovering': return 'brain_discovering';
+        case 'parsing': return 'brain_parsing';
+        case 'indexing': return 'brain_indexing';
+        case 'ready': return 'brain_ready';
+        case 'partial': return 'brain_partial';
+        case 'stale': return 'brain_stale';
+        case 'corrupt': return 'brain_corrupt';
+        case 'canceled': return 'brain_canceled';
+        case 'failed': return 'brain_failed';
+    }
+}
+/** Source-free fields allowed in activation analytics payloads. */
+exports.PILOT_ANALYTICS_ALLOWED_FIELDS = [
+    'milestone',
+    'reasonCode',
+    'stageId',
+    'agent',
+    'enforcementPosture',
+    'brainState',
+    'workspaceKind',
+    'durationMs',
+    'attempt',
+];
+function isPilotActivationMilestone(value) {
+    return typeof value === 'string' && exports.PILOT_ACTIVATION_MILESTONES.includes(value);
+}
+function resolveCurrentFunnelStage(completed) {
+    for (const stage of exports.PILOT_FUNNEL_STAGES) {
+        const stageMilestones = stage.milestones;
+        let stageComplete = false;
+        if (stage.id === 'brain') {
+            stageComplete = completed.has('brain_ready') || completed.has('brain_partial');
+        }
+        else if (stage.id === 'workspace') {
+            stageComplete = completed.has('workspace_selected')
+                || completed.has('organization_created')
+                || completed.has('organization_joined');
+        }
+        else if (stage.id === 'account') {
+            stageComplete = completed.has('signup_completed');
+        }
+        else if (stage.id === 'repository') {
+            stageComplete = stageMilestones.every((m) => completed.has(m));
+        }
+        else if (stage.id === 'governance') {
+            stageComplete = completed.has('first_completed_ai_change_record');
+        }
+        else if (stage.id === 'team') {
+            stageComplete = completed.has('seven_day_return');
+        }
+        else {
+            stageComplete = stageMilestones.some((m) => completed.has(m));
+        }
+        if (!stageComplete)
+            return stage.id;
+    }
+    return 'team';
+}
+function buildFunnelStageProgress(completed) {
+    const current = resolveCurrentFunnelStage(completed);
+    return exports.PILOT_FUNNEL_STAGES.map((stage) => {
+        const stageMilestones = stage.milestones;
+        let complete = false;
+        if (stage.id === 'brain') {
+            complete = completed.has('brain_ready') || completed.has('brain_partial');
+        }
+        else if (stage.id === 'workspace') {
+            complete = completed.has('workspace_selected')
+                || completed.has('organization_created')
+                || completed.has('organization_joined');
+        }
+        else {
+            complete = stageMilestones.some((m) => completed.has(m));
+        }
+        const currentMilestone = stageMilestones.find((m) => !completed.has(m)) ?? null;
+        return {
+            stageId: stage.id,
+            label: stage.label,
+            complete,
+            currentMilestone: stage.id === current ? currentMilestone : null,
+            nextAction: stage.nextAction,
+        };
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/pilot-funnel/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/pilot-funnel/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AA4GH,sEAuBC;AAED,sDAaC;AA+DD,gEAEC;AAED,8DA0BC;AAED,4DAyBC;AAxQY,QAAA,2BAA2B,GAAG,0BAAmC,CAAC;AAE/E,iFAAiF;AACpE,QAAA,2BAA2B,GAAG;IACzC,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,kBAAkB;IAClB,0BAA0B;IAC1B,sBAAsB;IACtB,sBAAsB;IACtB,kCAAkC;IAClC,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAIX,yDAAyD;AAC5C,QAAA,mBAAmB,GAAG;IACjC;QACE,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,CAAC,kBAAkB,CAAU;QACzC,UAAU,EAAE,2DAA2D;KACxE;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,qBAAqB,CAAU;QAC1F,UAAU,EAAE,gDAAgD;KAC7D;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,oBAAoB;QAC3B,UAAU,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,CAAU;QACtF,UAAU,EAAE,sDAAsD;KACnE;IACD;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,kBAAkB;QACzB,UAAU,EAAE;YACV,mBAAmB;YACnB,mBAAmB;YACnB,eAAe;YACf,gBAAgB;YAChB,aAAa;YACb,eAAe;YACf,aAAa;YACb,eAAe;YACf,gBAAgB;YAChB,cAAc;SACN;QACV,UAAU,EAAE,+DAA+D;KAC5E;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,gBAAgB;QACvB,UAAU,EAAE;YACV,0BAA0B;YAC1B,sBAAsB;YACtB,sBAAsB;YACtB,kCAAkC;SAC1B;QACV,UAAU,EAAE,gEAAgE;KAC7E;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,kBAAkB;QACzB,UAAU,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAU;QAC7D,UAAU,EAAE,6CAA6C;KAC1D;CACO,CAAC;AAIX,iFAAiF;AACpE,QAAA,kBAAkB,GAAG;IAChC,aAAa;IACb,aAAa;IACb,SAAS;IACT,UAAU;IACV,OAAO;IACP,SAAS;IACT,OAAO;IACP,SAAS;IACT,UAAU;IACV,QAAQ;CACA,CAAC;AAIX,qEAAqE;AACrE,SAAgB,6BAA6B,CAAC,KAG7C;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,IAAI,SAAS,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC;IAE1C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAClD,IAAI,SAAS,KAAK,WAAW;QAAE,OAAO,aAAa,CAAC;IACpD,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7B,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,aAAa,CAAC;QAC1E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,aAAa,KAAK,uBAAuB;YAAE,OAAO,UAAU,CAAC;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAAsB;IAC1D,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa,CAAC,CAAC,OAAO,mBAAmB,CAAC;QAC/C,KAAK,aAAa,CAAC,CAAC,OAAO,mBAAmB,CAAC;QAC/C,KAAK,SAAS,CAAC,CAAC,OAAO,eAAe,CAAC;QACvC,KAAK,UAAU,CAAC,CAAC,OAAO,gBAAgB,CAAC;QACzC,KAAK,OAAO,CAAC,CAAC,OAAO,aAAa,CAAC;QACnC,KAAK,SAAS,CAAC,CAAC,OAAO,eAAe,CAAC;QACvC,KAAK,OAAO,CAAC,CAAC,OAAO,aAAa,CAAC;QACnC,KAAK,SAAS,CAAC,CAAC,OAAO,eAAe,CAAC;QACvC,KAAK,UAAU,CAAC,CAAC,OAAO,gBAAgB,CAAC;QACzC,KAAK,QAAQ,CAAC,CAAC,OAAO,cAAc,CAAC;IACvC,CAAC;AACH,CAAC;AAkDD,mEAAmE;AACtD,QAAA,8BAA8B,GAAG;IAC5C,WAAW;IACX,YAAY;IACZ,SAAS;IACT,OAAO;IACP,oBAAoB;IACpB,YAAY;IACZ,eAAe;IACf,YAAY;IACZ,SAAS;CACD,CAAC;AAEX,SAAgB,0BAA0B,CAAC,KAAc;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,mCAAiD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzG,CAAC;AAED,SAAgB,yBAAyB,CACvC,SAAgD;IAEhD,KAAK,MAAM,KAAK,IAAI,2BAAmB,EAAE,CAAC;QACxC,MAAM,eAAe,GAAG,KAAK,CAAC,UAAiD,CAAC;QAChF,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,KAAK,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;YACzB,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,KAAK,CAAC,EAAE,KAAK,WAAW,EAAE,CAAC;YACpC,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC;mBAC9C,SAAS,CAAC,GAAG,CAAC,sBAAsB,CAAC;mBACrC,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAClC,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;YACrC,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;YACrC,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACpE,CAAC;aAAM,IAAI,KAAK,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YAC/B,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,wBAAwB,CACtC,SAAgD;IAEhD,MAAM,OAAO,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,2BAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,eAAe,GAAG,KAAK,CAAC,UAAiD,CAAC;QAChF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,KAAK,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;YACzB,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC5E,CAAC;aAAM,IAAI,KAAK,CAAC,EAAE,KAAK,WAAW,EAAE,CAAC;YACpC,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC;mBACzC,SAAS,CAAC,GAAG,CAAC,sBAAsB,CAAC;mBACrC,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAChF,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ;YACR,gBAAgB,EAAE,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI;YAChE,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/pilot-setup/index.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Shared typed setup contract between CLI and dashboard.
+ *
+ * Both surfaces consume the same JSON shape from `neurcode agent setup --json`
+ * and the dashboard setup API mirror. No duplicated command templates.
+ */
+import type { PilotEnforcementPosture } from '../pilot-funnel/index.js';
+export declare const PILOT_SETUP_CONTRACT_SCHEMA_VERSION: "neurcode.pilot-setup.v1";
+export interface PilotSetupCommandStep {
+    id: string;
+    label: string;
+    command: string;
+    /** When true, this step is the single recovery command if setup fails. */
+    recovery?: boolean;
+}
+export interface PilotSetupRepoFacts {
+    trackedFileCount: number;
+    primaryLanguages: string[];
+    hasCodeowners: boolean;
+    sensitiveSurfaceCount: number;
+    scale: 'small' | 'medium' | 'large' | 'unknown';
+}
+export interface PilotSetupHostCapability {
+    agent: string;
+    adapter: string;
+    enforcementPosture: PilotEnforcementPosture;
+    automatic: boolean;
+    description: string;
+}
+export interface PilotSetupPairingStatus {
+    status: 'connected' | 'pending' | 'local_only';
+    repoName: string | null;
+    organizationHandle: string | null;
+}
+export interface PilotSetupContract {
+    schemaVersion: typeof PILOT_SETUP_CONTRACT_SCHEMA_VERSION;
+    generatedAt: string;
+    agent: string;
+    adapter: string;
+    privacy: {
+        metadataOnly: true;
+        sourceUploaded: false;
+        sourceIncluded: false;
+    };
+    repoFacts: PilotSetupRepoFacts;
+    hostCapability: PilotSetupHostCapability;
+    pairing: PilotSetupPairingStatus;
+    steps: PilotSetupCommandStep[];
+    recoveryCommand: string;
+    validation: {
+        authCheck: string;
+        pairingCheck: string;
+    };
+}
+export declare function buildPilotSetupRecoveryCommand(steps: PilotSetupCommandStep[]): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/pilot-setup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pilot-setup/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,eAAO,MAAM,mCAAmC,EAAG,yBAAkC,CAAC;AAEtF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;CACjD;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,uBAAuB,CAAC;IAC5C,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,OAAO,mCAAmC,CAAC;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QACP,YAAY,EAAE,IAAI,CAAC;QACnB,cAAc,EAAE,KAAK,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC;KACvB,CAAC;IACF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,cAAc,EAAE,wBAAwB,CAAC;IACzC,OAAO,EAAE,uBAAuB,CAAC;IACjC,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAKrF"}

package/dist/pilot-setup/index.js

@@ -0,0 +1,19 @@
+"use strict";
+/**
+ * Shared typed setup contract between CLI and dashboard.
+ *
+ * Both surfaces consume the same JSON shape from `neurcode agent setup --json`
+ * and the dashboard setup API mirror. No duplicated command templates.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PILOT_SETUP_CONTRACT_SCHEMA_VERSION = void 0;
+exports.buildPilotSetupRecoveryCommand = buildPilotSetupRecoveryCommand;
+exports.PILOT_SETUP_CONTRACT_SCHEMA_VERSION = 'neurcode.pilot-setup.v1';
+function buildPilotSetupRecoveryCommand(steps) {
+    const recovery = steps.find((step) => step.recovery === true);
+    if (recovery)
+        return recovery.command;
+    const doctor = steps.find((step) => step.id === 'health' || step.id === 'doctor');
+    return doctor?.command ?? steps[0]?.command ?? 'neurcode doctor --runtime';
+}
+//# sourceMappingURL=index.js.map

package/dist/pilot-setup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/pilot-setup/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAyDH,wEAKC;AA1DY,QAAA,mCAAmC,GAAG,yBAAkC,CAAC;AAqDtF,SAAgB,8BAA8B,CAAC,KAA8B;IAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC9D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAClF,OAAO,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,2BAA2B,CAAC;AAC7E,CAAC"}

package/dist/repo-intelligence-v2.d.ts

@@ -5,6 +5,7 @@ export declare const POLICY_EVALUATION_SCHEMA_VERSION: "neurcode.policy-evaluati
 export declare const SEMANTIC_ADVISORY_SCHEMA_VERSION: "neurcode.semantic-advisory.v2";
 export declare const REPO_INTELLIGENCE_EVIDENCE_SCHEMA_VERSION: "neurcode.repo-intelligence-evidence.v2";
 export declare const REPO_INTELLIGENCE_OPERATIONS_SCHEMA_VERSION: "neurcode.repo-intelligence-operations.v1";
+export declare const LANGUAGE_COVERAGE_MATRIX_SCHEMA_VERSION: "neurcode.language-coverage-matrix.v1";
 export type IntelligenceTruthClassification = 'deterministic' | 'backend_signed' | 'advisory' | 'not_evaluated';
 export type PolicyVerdict = 'allow' | 'warn' | 'block' | 'not_evaluated';
 export type PolicyMode = 'off' | 'warn' | 'block';
@@ -22,6 +23,62 @@ export interface LanguageAnalysisCoverage {
     facts: Array<'symbols' | 'references' | 'imports' | 'exports' | 'calls'>;
     limitations: string[];
 }
+/**
+ * Canonical relationship-authority class. Structurally identical to
+ * governance-runtime's `RelationshipAuthorityClass`; declared here because
+ * contracts is the lowest layer and cannot import governance-runtime. The
+ * language-coverage builder derives capability tiers from this class.
+ */
+export type RepositoryRelationshipAuthorityClass = 'deterministic_exact' | 'deterministic_structural' | 'bounded_inference' | 'advisory_heuristic' | 'not_evaluated' | 'unsupported';
+/**
+ * Per-language capability tier (Iteration 7 — Language Coverage Matrix).
+ *
+ * This is deliberately distinct from {@link IntelligenceTruthClassification}:
+ * that classifies how strongly a *single claim* is known; this classifies how
+ * well a *language dimension* is handled a priori. Fail-closed contract: an
+ * absent or unproven parser is `not_evaluated`, never `supported`.
+ *
+ * - `supported`  — deterministic structural facts (e.g. resolved imports, symbols).
+ * - `partial`    — bounded inference; useful but not a guarantee (e.g. test adjacency).
+ * - `advisory`   — heuristic signal worth a human look; never a hard block.
+ * - `not_evaluated` — no parser/evidence; the dimension is not assessed.
+ */
+export type LanguageSupportTier = 'supported' | 'partial' | 'advisory' | 'not_evaluated';
+export type LanguageCoverageDimension = 'parsing' | 'imports' | 'symbols' | 'testImpact' | 'ownership';
+export interface LanguageCoverageDimensionCell {
+    tier: LanguageSupportTier;
+    /**
+     * Relationship-authority class this tier derives from. `null` for dimensions
+     * that are not edge-based: `parsing` is parser-depth derived and `ownership`
+     * is CODEOWNERS/path derived, independent of any language parser.
+     */
+    authorityClass: RepositoryRelationshipAuthorityClass | null;
+    /** Source-free reason codes explaining the tier. */
+    reasonCodes: string[];
+}
+export interface LanguageCoverageRow {
+    language: RepositoryLanguage;
+    /** Highest parser depth available: observed depth when indexed, else catalog floor. */
+    parserDepth: ParserDepth;
+    /** True when at least one file of this language is present in the indexed graph. */
+    observed: boolean;
+    filesSeen: number;
+    filesAnalyzed: number;
+    dimensions: Record<LanguageCoverageDimension, LanguageCoverageDimensionCell>;
+    /** Honest, static limitation statements. Source-free: no paths, symbols, or bodies. */
+    limitations: string[];
+}
+export interface LanguageCoverageMatrix {
+    schemaVersion: typeof LANGUAGE_COVERAGE_MATRIX_SCHEMA_VERSION;
+    /**
+     * Whether the indexed graph is coverage-complete. Tiers describe per-language
+     * capability on covered paths; overall graph completeness is governed
+     * separately by `scaleStatus.coverage.impactAuthority`.
+     */
+    coverageComplete: boolean;
+    /** One row per roadmap language plus any other observed language, sorted by name. */
+    languages: LanguageCoverageRow[];
+}
 export interface SourceFreeSymbolFact {
     id: string;
     name: string;