@sentry/warden 0.46.0 → 0.46.2

package/dist/reporting/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/reporting/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAML,uBAAuB,EAIxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAmB,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAWzE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAmC9D;;;;;;GAMG;AACH,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;iBAM1B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;EASrC,CAAC;AAEH,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;iBAKxB,CAAC;AAqCH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAgBjC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoF/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uBAAuB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,WAAW,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;IACxD,eAAe,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uBAAuB,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACpD;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACvC,gBAAgB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;IAC1D,eAAe,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,EAAE,CAAC;IACzD,+IAA+I;IAC/I,eAAe,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACvC,gBAAgB,CAAC,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACnD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,WAAW,CAAC,0BAA0B,CAAC,kBAAkB,CAAC,CAAC,CAQ9D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5E,eAAe,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,GAC7D,IAAI,CAAC,0BAA0B,EAAE,WAAW,GAAG,kBAAkB,GAAG,iBAAiB,CAAC,CAMxF;AA0DD,gDAAgD;AAChD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,EAAE,EACtB,OAAO,EAAE,YAAY,EACrB,mBAAmB,GAAE,kBAAkB,EAAO,EAC9C,OAAO,GAAE,0BAA+B,GACvC,cAAc,CAsJhB"}

package/dist/reporting/output.js

@@ -0,0 +1,419 @@
+import { z } from 'zod';
+import { AuxiliaryUsageAttributionMapSchema, AuxiliaryUsageMapSchema, FindingSchema, GitHubEventTypeSchema, LocationSchema, SeverityThresholdSchema, SkillErrorSchema, SourceSnippetSchema, UsageStatsSchema, } from '../types/index.js';
+import { FindingObservationSchema } from './outcomes.js';
+import { generateContentHash } from '../output/dedup.js';
+import { getVersion } from '../utils/version.js';
+import { buildProvenanceAndDiscarded, DiscardedFindingSchema, FindingProvenanceSchema, provenanceKey, } from './provenance.js';
+const FindingAttributionSchema = z.object({
+    skillExecutionId: z.string().optional(),
+    skillName: z.string(),
+    role: z.enum(['primary', 'corroborating']),
+    matchType: z.enum(['hash', 'semantic']).optional(),
+});
+const ExportedFindingSchema = z.object({
+    id: z.string(),
+    /** Set to the same value as `id` once dedupe/recenter matches this finding to an already-posted comment. */
+    reportedId: z.string().optional(),
+    severity: FindingSchema.shape.severity,
+    confidence: FindingSchema.shape.confidence,
+    title: z.string(),
+    description: z.string(),
+    /** Verifier's evidence trace, when a verification pass ran. */
+    verification: z.string().optional(),
+    location: LocationSchema.optional(),
+    additionalLocations: z.array(LocationSchema).optional(),
+    sourceSnippet: SourceSnippetSchema.optional(),
+    /** Stable cross-run key, same value `output/dedup.ts` uses for hash-based dedupe. */
+    contentHash: z.string().optional(),
+    /** Skills that independently flagged this finding, self included as `role: 'primary'`. */
+    reportedBy: z.array(FindingAttributionSchema).optional(),
+    provenance: FindingProvenanceSchema.optional(),
+});
+const HarnessSchema = z.object({
+    name: z.literal('warden'),
+    version: z.string(),
+    actionRef: z.string().optional(),
+});
+/**
+ * Action-level fallbacks every trigger falls back to when its own config
+ * doesn't override them. Deliberately narrower than a per-trigger
+ * ResolvedTrigger: model/runtime/minConfidence/verifyFindings are resolved
+ * per skill/trigger in this repo, not at the action level, so there's no
+ * single run-wide value to report for them here.
+ */
+const ResolvedDefaultsSchema = z.object({
+    failOn: SeverityThresholdSchema.optional(),
+    reportOn: SeverityThresholdSchema.optional(),
+    failCheck: z.boolean().optional(),
+    requestChanges: z.boolean().optional(),
+    maxFindings: z.number().int().nonnegative().optional(),
+});
+export const SkippedTriggerReasonSchema = z.enum([
+    'no_event_match',
+    'path_filter',
+    'draft_state',
+    'label_mismatch',
+    'no_changes',
+    'pending',
+    /** The trigger matched and ran, but threw before producing a report. */
+    'error',
+]);
+const SkippedTriggerSchema = z.object({
+    skillName: z.string(),
+    triggerId: z.string().optional(),
+    triggerName: z.string().optional(),
+    reason: SkippedTriggerReasonSchema,
+});
+const TriggerErrorSchema = z.object({
+    name: z.string().optional(),
+    message: z.string(),
+});
+/** Mirrors `FindingProcessingEvent` (sdk/types.ts) so it can round-trip through the analyze/report replay artifact. */
+const ReplayFindingProcessingEventSchema = z.object({
+    stage: z.enum(['dedupe', 'verification', 'merge', 'fix_gate']),
+    action: z.enum(['dropped', 'rejected', 'revised', 'merged', 'stripped_fix']),
+    finding: FindingSchema,
+    reason: z.string().optional(),
+    replacement: FindingSchema.optional(),
+});
+// Durable analyze/report replay rows join by triggerName plus configured
+// skillName. `report.skill` is preserved as report identity and may differ for
+// local path skills with frontmatter names.
+const TriggerRunResultBaseSchema = z.object({
+    triggerId: z.string().optional(),
+    triggerName: z.string(),
+    skillName: z.string(),
+});
+const ReplaySkillReportSchema = z.object({
+    skill: z.string(),
+    summary: z.string(),
+    findings: z.array(FindingSchema),
+    durationMs: z.number().nonnegative().optional(),
+    usage: UsageStatsSchema.optional(),
+    auxiliaryUsage: AuxiliaryUsageMapSchema.optional(),
+    auxiliaryUsageAttribution: AuxiliaryUsageAttributionMapSchema.optional(),
+    model: z.string().optional(),
+    runtime: z.string().optional(),
+});
+export const TriggerRunResultSchema = z.discriminatedUnion('status', [
+    TriggerRunResultBaseSchema.extend({
+        status: z.literal('success'),
+        report: ReplaySkillReportSchema,
+        error: z.never().optional(),
+        /** Verification/merge/dedupe events captured during analyze mode, replayed so report mode's export still carries provenance/discardedFindings. */
+        findingProcessingEvents: z.array(ReplayFindingProcessingEventSchema).optional(),
+        /** Analyze mode's model lanes, replayed so report mode's export doesn't drop them. */
+        auxiliaryModel: z.string().optional(),
+        synthesisModel: z.string().optional(),
+    }),
+    TriggerRunResultBaseSchema.extend({
+        status: z.literal('error'),
+        report: z.never().optional(),
+        error: TriggerErrorSchema,
+    }),
+]);
+export const FindingsOutputSchema = z.object({
+    version: z.literal('1'),
+    timestamp: z.string().datetime(),
+    runAttempt: z.string().optional(),
+    /** Which build of Warden produced this run. */
+    harness: HarnessSchema.optional(),
+    repository: z.object({
+        owner: z.string(),
+        name: z.string(),
+        fullName: z.string(),
+    }),
+    event: GitHubEventTypeSchema,
+    pullRequest: z.object({
+        number: z.number().int(),
+        author: z.string(),
+        title: z.string(),
+        baseBranch: z.string(),
+        headBranch: z.string(),
+        headSha: z.string(),
+    }).optional(),
+    runId: z.string(),
+    recalledMemories: z.array(z.object({
+        id: z.string().trim().min(1).max(128),
+        version: z.number().int().positive(),
+    }).strict()).max(5).optional(),
+    memoryRecallId: z.string().trim().min(1).max(128).optional(),
+    /** The model/threshold config this run resolved to at the action level. */
+    resolvedDefaults: ResolvedDefaultsSchema.optional(),
+    /** Configured triggers that never fired this run, with why. */
+    skippedTriggers: z.array(SkippedTriggerSchema).optional(),
+    summary: z.object({
+        totalFindings: z.number().int().nonnegative(),
+        findingsBySeverity: z.object({
+            high: z.number().int().nonnegative(),
+            medium: z.number().int().nonnegative(),
+            low: z.number().int().nonnegative(),
+        }),
+        totalSkills: z.number().int().nonnegative(),
+        totalSkillExecutions: z.number().int().nonnegative().optional(),
+        byOutcome: z.object({
+            posted: z.number().int().nonnegative(),
+            deduped: z.number().int().nonnegative(),
+            skipped: z.number().int().nonnegative(),
+            resolved: z.number().int().nonnegative(),
+            failed: z.number().int().nonnegative(),
+        }).optional(),
+    }),
+    skills: z.array(z.object({
+        name: z.string(),
+        summary: z.string(),
+        model: z.string().optional(),
+        runtime: z.string().optional(),
+        auxiliaryUsage: AuxiliaryUsageMapSchema.optional(),
+        auxiliaryUsageAttribution: AuxiliaryUsageAttributionMapSchema.optional(),
+        auxiliaryModel: z.string().optional(),
+        synthesisModel: z.string().optional(),
+        durationMs: z.number().nonnegative().optional(),
+        usage: UsageStatsSchema.optional(),
+        failedHunks: z.number().int().nonnegative().optional(),
+        failedExtractions: z.number().int().nonnegative().optional(),
+        error: SkillErrorSchema.optional(),
+        /** Stable id for this skill×trigger execution. */
+        skillExecutionId: z.string().optional(),
+        triggerId: z.string().optional(),
+        triggerName: z.string().optional(),
+        findingsBySeverity: z.object({
+            high: z.number().int().nonnegative(),
+            medium: z.number().int().nonnegative(),
+            low: z.number().int().nonnegative(),
+        }).optional(),
+        checkRunUrl: z.string().optional(),
+        checkRunId: z.number().int().positive().optional(),
+        /** Posting-derived; absent from analyze-mode replay and live writes. */
+        reviewEvent: z.enum(['APPROVE', 'REQUEST_CHANGES', 'COMMENT']).optional(),
+        checkConclusion: z.enum(['success', 'failure', 'neutral', 'cancelled']).optional(),
+        /** Schedule-mode only. */
+        issueNumber: z.number().int().positive().optional(),
+        issueUrl: z.string().optional(),
+        findings: z.array(ExportedFindingSchema),
+    })),
+    /** Verifier-rejected and merge-absorbed candidates that never reached `findings[]`. */
+    discardedFindings: z.array(DiscardedFindingSchema).optional(),
+    triggerResults: z.array(TriggerRunResultSchema).optional(),
+    findingObservations: z.array(FindingObservationSchema).default([]),
+});
+/** Build the action-level `resolvedDefaults` block from parsed action inputs. */
+export function buildResolvedDefaults(inputs) {
+    return {
+        failOn: inputs.failOn,
+        reportOn: inputs.reportOn,
+        failCheck: inputs.failCheck,
+        requestChanges: inputs.requestChanges,
+        maxFindings: inputs.maxFindings,
+    };
+}
+/**
+ * Build the `actionRef`/`resolvedDefaults`/`skippedTriggers` triple every
+ * `writeFindingsOutput(Live)` call site needs. Centralizing this keeps a
+ * future field addition from requiring an edit at every individual write
+ * call site across `pr-workflow.ts`/`schedule.ts`.
+ */
+export function buildBaseOutputOptions(inputs, skippedTriggers) {
+    return {
+        actionRef: inputs.actionRef,
+        resolvedDefaults: buildResolvedDefaults(inputs),
+        skippedTriggers,
+    };
+}
+function serializeTriggerError(error) {
+    if (error instanceof Error) {
+        return {
+            name: error.name,
+            message: error.message,
+        };
+    }
+    return { message: String(error) };
+}
+function serializeReplayReport(report) {
+    return {
+        skill: report.skill,
+        summary: report.summary,
+        findings: report.findings,
+        durationMs: report.durationMs,
+        usage: report.usage,
+        auxiliaryUsage: report.auxiliaryUsage,
+        auxiliaryUsageAttribution: report.auxiliaryUsageAttribution,
+        model: report.model,
+        runtime: report.runtime,
+    };
+}
+function serializeTriggerResult(result) {
+    if (result.report) {
+        return {
+            triggerId: result.triggerId,
+            triggerName: result.triggerName,
+            skillName: result.skillName,
+            status: 'success',
+            report: serializeReplayReport(result.report),
+            findingProcessingEvents: result.findingProcessingEvents,
+            auxiliaryModel: result.auxiliaryModel,
+            synthesisModel: result.synthesisModel,
+        };
+    }
+    return {
+        triggerId: result.triggerId,
+        triggerName: result.triggerName,
+        skillName: result.skillName,
+        status: 'error',
+        error: serializeTriggerError(result.error ?? 'Trigger did not produce a report'),
+    };
+}
+function severityCounts(items) {
+    return {
+        high: items.filter((i) => i.severity === 'high').length,
+        medium: items.filter((i) => i.severity === 'medium').length,
+        low: items.filter((i) => i.severity === 'low').length,
+    };
+}
+/** Build the public findings export payload. */
+export function buildFindingsOutput(reports, context, findingObservations = [], options = {}) {
+    const allFindings = reports.flatMap((r) => r.findings);
+    const metaByReport = new Map((options.skillExecutions ?? []).map((meta) => [meta.report, meta]));
+    // Corroborating skills, grouped by the survivor finding id they were
+    // matched against (`dedupe.existingFindingId`) — not by re-derived
+    // content/location hashing, which misses semantic matches (different
+    // content hash than the survivor) and never lists the observing skill
+    // itself, only whichever skills the matched comment already attributed.
+    const corroborationBySurvivorId = new Map();
+    function addCorroborator(survivorId, skillName, matchType) {
+        const bySkill = corroborationBySurvivorId.get(survivorId) ?? new Map();
+        bySkill.set(skillName, { skillName, matchType });
+        corroborationBySurvivorId.set(survivorId, bySkill);
+    }
+    for (const observation of findingObservations) {
+        if (observation.outcome !== 'deduped')
+            continue;
+        const survivorId = observation.dedupe.existingFindingId;
+        if (!survivorId)
+            continue;
+        if (observation.skill) {
+            addCorroborator(survivorId, observation.skill, observation.dedupe.matchType);
+        }
+        for (const skillName of observation.dedupe.existingSkills ?? []) {
+            addCorroborator(survivorId, skillName, observation.dedupe.matchType);
+        }
+    }
+    const { provenanceByFindingId, discarded } = buildProvenanceAndDiscarded((options.skillExecutions ?? []).map((meta) => ({
+        skillExecutionId: meta.skillExecutionId,
+        model: meta.report.model,
+        verificationModel: meta.auxiliaryModel,
+        mergeModel: meta.synthesisModel,
+        events: meta.findingProcessingEvents ?? [],
+    })));
+    const byOutcome = {
+        posted: 0,
+        deduped: 0,
+        skipped: 0,
+        resolved: 0,
+        failed: 0,
+    };
+    for (const observation of findingObservations) {
+        byOutcome[observation.outcome]++;
+    }
+    const output = {
+        version: '1',
+        timestamp: options.timestamp ?? new Date().toISOString(),
+        runAttempt: options.runAttempt ?? process.env['GITHUB_RUN_ATTEMPT'],
+        harness: { name: 'warden', version: getVersion(), actionRef: options.actionRef },
+        repository: {
+            owner: context.repository.owner,
+            name: context.repository.name,
+            fullName: context.repository.fullName,
+        },
+        event: context.eventType,
+        ...(context.pullRequest && {
+            pullRequest: {
+                number: context.pullRequest.number,
+                author: context.pullRequest.author,
+                title: context.pullRequest.title,
+                baseBranch: context.pullRequest.baseBranch,
+                headBranch: context.pullRequest.headBranch,
+                headSha: context.pullRequest.headSha,
+            },
+        }),
+        runId: options.runId ?? process.env['GITHUB_RUN_ID'] ?? '',
+        ...(options.recalledMemories?.length ? { recalledMemories: [...options.recalledMemories] } : {}),
+        ...(options.memoryRecallId ? { memoryRecallId: options.memoryRecallId } : {}),
+        ...(options.resolvedDefaults && { resolvedDefaults: options.resolvedDefaults }),
+        ...(options.skippedTriggers && { skippedTriggers: options.skippedTriggers }),
+        summary: {
+            totalFindings: allFindings.length,
+            findingsBySeverity: severityCounts(allFindings),
+            totalSkills: reports.length,
+            totalSkillExecutions: reports.length,
+            byOutcome,
+        },
+        skills: reports.map((r) => {
+            const meta = metaByReport.get(r);
+            return {
+                name: r.skill,
+                summary: r.summary,
+                model: r.model,
+                runtime: r.runtime,
+                auxiliaryUsage: r.auxiliaryUsage,
+                auxiliaryUsageAttribution: r.auxiliaryUsageAttribution,
+                auxiliaryModel: meta?.auxiliaryModel,
+                synthesisModel: meta?.synthesisModel,
+                durationMs: r.durationMs,
+                usage: r.usage,
+                failedHunks: r.failedHunks,
+                failedExtractions: r.failedExtractions,
+                error: r.error,
+                skillExecutionId: meta?.skillExecutionId,
+                triggerId: meta?.triggerId,
+                triggerName: meta?.triggerName,
+                findingsBySeverity: severityCounts(r.findings),
+                checkRunUrl: meta?.checkRunUrl,
+                checkRunId: meta?.checkRunId,
+                reviewEvent: meta?.reviewEvent,
+                checkConclusion: meta?.checkConclusion,
+                issueNumber: meta?.issueNumber,
+                issueUrl: meta?.issueUrl,
+                findings: r.findings.map((f) => {
+                    const contentHash = generateContentHash(f.title, f.description);
+                    const survivorId = f.reportedId ?? f.id;
+                    const corroborators = [...(corroborationBySurvivorId.get(survivorId)?.values() ?? [])];
+                    const reportedBy = meta?.skillExecutionId !== undefined
+                        ? [
+                            { skillExecutionId: meta.skillExecutionId, skillName: r.skill, role: 'primary' },
+                            ...corroborators
+                                .filter((corroborator) => corroborator.skillName !== r.skill)
+                                .map((corroborator) => ({
+                                skillName: corroborator.skillName,
+                                role: 'corroborating',
+                                matchType: corroborator.matchType,
+                            })),
+                        ]
+                        : undefined;
+                    return {
+                        id: f.id,
+                        reportedId: f.reportedId,
+                        severity: f.severity,
+                        confidence: f.confidence,
+                        title: f.title,
+                        description: f.description,
+                        verification: f.verification,
+                        location: f.location,
+                        additionalLocations: f.additionalLocations,
+                        sourceSnippet: f.sourceSnippet,
+                        contentHash,
+                        reportedBy,
+                        provenance: provenanceByFindingId.get(provenanceKey(meta?.skillExecutionId, f.id)),
+                    };
+                }),
+            };
+        }),
+        ...(discarded.length > 0 && { discardedFindings: discarded }),
+        ...(options.triggerResults && {
+            triggerResults: options.triggerResults.map(serializeTriggerResult),
+        }),
+        findingObservations,
+    };
+    return FindingsOutputSchema.parse(output);
+}
+//# sourceMappingURL=output.js.map

package/dist/reporting/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/reporting/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,kCAAkC,EAClC,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAIzB,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,4GAA4G;IAC5G,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ;IACtC,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,+DAA+D;IAC/D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;IACvD,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,qFAAqF;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,0FAA0F;IAC1F,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IACxD,UAAU,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/C,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,SAAS;IACT,wEAAwE;IACxE,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,0BAA0B;CACnC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,uHAAuH;AACvH,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5E,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,aAAa,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,yEAAyE;AACzE,+EAA+E;AAC/E,4CAA4C;AAC5C,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAClD,yBAAyB,EAAE,kCAAkC,CAAC,QAAQ,EAAE;IACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACnE,0BAA0B,CAAC,MAAM,CAAC;QAChC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5B,MAAM,EAAE,uBAAuB;QAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;QAC3B,kJAAkJ;QAClJ,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,QAAQ,EAAE;QAC/E,sFAAsF;QACtF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;IACF,0BAA0B,CAAC,MAAM,CAAC;QAChC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;QAC5B,KAAK,EAAE,kBAAkB;KAC1B,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,+CAA+C;IAC/C,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC;IACF,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CAAC,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5D,2EAA2E;IAC3E,gBAAgB,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IACnD,+DAA+D;IAC/D,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC7C,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC3C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC/D,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,cAAc,EAAE,uBAAuB,CAAC,QAAQ,EAAE;QAClD,yBAAyB,EAAE,kCAAkC,CAAC,QAAQ,EAAE;QACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC/C,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACtD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC5D,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QAClC,kDAAkD;QAClD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC,QAAQ,EAAE;QACb,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAClD,wEAAwE;QACxE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QACzE,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClF,0BAA0B;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;KACzC,CAAC,CAAC;IACH,uFAAuF;IACvF,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC7D,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC1D,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACnE,CAAC,CAAC;AA8CH,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,MAMrC;IACC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA4E,EAC5E,eAA8D;IAE9D,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,gBAAgB,EAAE,qBAAqB,CAAC,MAAM,CAAC;QAC/C,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAmB;IAChD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA2B;IACzD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5C,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI,kCAAkC,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACnD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;QAC3D,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;KACtD,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,OAAqB,EACrB,sBAA4C,EAAE,EAC9C,UAAsC,EAAE;IAExC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAEjG,qEAAqE;IACrE,mEAAmE;IACnE,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAA2E,CAAC;IACrH,SAAS,eAAe,CAAC,UAAkB,EAAE,SAAiB,EAAE,SAAsC;QACpG,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,yBAAyB,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;QAC9C,IAAI,WAAW,CAAC,OAAO,KAAK,SAAS;YAAE,SAAS;QAChD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACxD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;YAChE,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,GAAG,2BAA2B,CACtE,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAA0B,EAAE,CAAC,CAAC;QACrE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;QACxB,iBAAiB,EAAE,IAAI,CAAC,cAAc;QACtC,UAAU,EAAE,IAAI,CAAC,cAAc;QAC/B,MAAM,EAAE,IAAI,CAAC,uBAAuB,IAAI,EAAE;KAC3C,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,CAAC;KACV,CAAC;IACF,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;QAC9C,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,GAAG;QACZ,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACxD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACnE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;QACzF,UAAU,EAAE;YACV,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;YAC/B,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI;YAC7B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ;SACtC;QACD,KAAK,EAAE,OAAO,CAAC,SAAS;QACxB,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI;YACzB,WAAW,EAAE;gBACX,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;gBAClC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;gBAClC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK;gBAChC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,UAAU;gBAC1C,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,UAAU;gBAC1C,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO;aACrC;SACF,CAAC;QACF,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE;QAC1D,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC/E,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5E,OAAO,EAAE;YACP,aAAa,EAAE,WAAW,CAAC,MAAM;YACjC,kBAAkB,EAAE,cAAc,CAAC,WAAW,CAAC;YAC/C,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,oBAAoB,EAAE,OAAO,CAAC,MAAM;YACpC,SAAS;SACV;QACD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACxB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,KAAK;gBACb,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,yBAAyB,EAAE,CAAC,CAAC,yBAAyB;gBACtD,cAAc,EAAE,IAAI,EAAE,cAAc;gBACpC,cAAc,EAAE,IAAI,EAAE,cAAc;gBACpC,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;gBACtC,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,gBAAgB,EAAE,IAAI,EAAE,gBAAgB;gBACxC,SAAS,EAAE,IAAI,EAAE,SAAS;gBAC1B,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC9C,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,UAAU,EAAE,IAAI,EAAE,UAAU;gBAC5B,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,eAAe,EAAE,IAAI,EAAE,eAAe;gBACtC,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,QAAQ,EAAE,IAAI,EAAE,QAAQ;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7B,MAAM,WAAW,GAAG,mBAAmB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;oBAChE,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;oBACxC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACvF,MAAM,UAAU,GAAG,IAAI,EAAE,gBAAgB,KAAK,SAAS;wBACrD,CAAC,CAAC;4BACE,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,SAAkB,EAAE;4BACzF,GAAG,aAAa;iCACb,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,KAAK,CAAC,CAAC,KAAK,CAAC;iCAC5D,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gCACtB,SAAS,EAAE,YAAY,CAAC,SAAS;gCACjC,IAAI,EAAE,eAAwB;gCAC9B,SAAS,EAAE,YAAY,CAAC,SAAS;6BAClC,CAAC,CAAC;yBACN;wBACH,CAAC,CAAC,SAAS,CAAC;oBAEd,OAAO;wBACL,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;wBAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;wBAC1C,aAAa,EAAE,CAAC,CAAC,aAAa;wBAC9B,WAAW;wBACX,UAAU;wBACV,UAAU,EAAE,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;qBACnF,CAAC;gBACJ,CAAC,CAAC;aACH,CAAC;QACJ,CAAC,CAAC;QACF,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,sBAAsB,CAAC;SACnE,CAAC;QACF,mBAAmB;KACpB,CAAC;IAEF,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/reporting/provenance.d.ts

@@ -0,0 +1,94 @@
+import { z } from 'zod';
+import type { FindingProcessingEvent } from '../sdk/types.js';
+export declare const FindingProvenanceSchema: z.ZodObject<{
+    originSkillExecutionId: z.ZodOptional<z.ZodString>;
+    originModel: z.ZodOptional<z.ZodString>;
+    verification: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        outcome: z.ZodLiteral<"revised">;
+        model: z.ZodOptional<z.ZodString>;
+        evidence: z.ZodOptional<z.ZodString>;
+        before: z.ZodObject<{
+            title: z.ZodString;
+            description: z.ZodString;
+            severity: z.ZodPreprocess<z.ZodEnum<{
+                high: "high";
+                low: "low";
+                medium: "medium";
+            }>>;
+            confidence: z.ZodOptional<z.ZodEnum<{
+                high: "high";
+                low: "low";
+                medium: "medium";
+            }>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>], "outcome">>;
+    merge: z.ZodOptional<z.ZodObject<{
+        model: z.ZodOptional<z.ZodString>;
+        absorbedFindingIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type FindingProvenance = z.infer<typeof FindingProvenanceSchema>;
+export declare const DiscardedFindingSchema: z.ZodObject<{
+    originSkillExecutionId: z.ZodOptional<z.ZodString>;
+    stage: z.ZodEnum<{
+        verification_rejected: "verification_rejected";
+        merge_absorbed: "merge_absorbed";
+        dedupe_dropped: "dedupe_dropped";
+    }>;
+    severity: z.ZodPreprocess<z.ZodEnum<{
+        high: "high";
+        low: "low";
+        medium: "medium";
+    }>>;
+    title: z.ZodString;
+    location: z.ZodOptional<z.ZodObject<{
+        path: z.ZodString;
+        startLine: z.ZodNumber;
+        endLine: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    model: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+    survivorFindingId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DiscardedFinding = z.infer<typeof DiscardedFindingSchema>;
+/** One skill execution's captured verification/merge events, for provenance matching. */
+export interface FindingExecutionEvents {
+    skillExecutionId?: string;
+    /** Primary/analysis model, attributed as a finding's origin. */
+    model?: string;
+    /** Model that ran the verification lane; attributed to verification-stage events instead of `model`. */
+    verificationModel?: string;
+    /** Model that ran the merge/synthesis lane; attributed to merge-stage events instead of `model`. */
+    mergeModel?: string;
+    events: FindingProcessingEvent[];
+}
+export interface ProvenanceAndDiscarded {
+    /** Keyed by `provenanceKey(skillExecutionId, findingId)` — see that function for why. */
+    provenanceByFindingId: Map<string, FindingProvenance>;
+    discarded: DiscardedFinding[];
+}
+/**
+ * Same-run dedupe can recenter two different skill executions' survivor
+ * findings onto the same id (e.g. both matched against the same pre-existing
+ * comment), so `findingId` alone is not a safe map key: a second execution's
+ * event would silently overwrite or merge into the first's entry, and both
+ * exported skill rows would then read the same (wrong) provenance. Scoping
+ * the key to the owning execution keeps each skill row's provenance
+ * independent.
+ */
+export declare function provenanceKey(skillExecutionId: string | undefined, findingId: string): string;
+/**
+ * Build per-finding provenance and the list of discarded candidates from
+ * captured `FindingProcessingEvent`s. Handles `verification`/`rejected`,
+ * `verification`/`revised`, `merge`/`merged`, and `dedupe`/`dropped` events —
+ * `fix_gate` events are out of scope here (they don't remove a finding, they
+ * strip a proposed fix from one that's kept).
+ *
+ * `poster.ts`'s `recenterReportFindingIds` keeps this lookup valid across
+ * cross-run dedupe: when it recenters a survivor's `id` onto a pre-existing
+ * comment's id, it remaps this same finding's id inside any already-captured
+ * `FindingProcessingEvent`s so the id this map is keyed by (and the id
+ * `output.ts` looks it up by) stay in sync.
+ */
+export declare function buildProvenanceAndDiscarded(executions: FindingExecutionEvents[]): ProvenanceAndDiscarded;
+//# sourceMappingURL=provenance.d.ts.map

package/dist/reporting/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../src/reporting/provenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAuB9D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;iBASjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wGAAwG;IACxG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oGAAoG;IACpG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,sBAAsB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,yFAAyF;IACzF,qBAAqB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,sBAAsB,EAAE,GAAG,sBAAsB,CAkFxG"}