@usefragments/core 1.7.1 → 1.8.0

package/dist/chunk-MZ4SW3TP.js

@@ -0,0 +1,375 @@
+// src/governance-telemetry.ts
+var GOVERNANCE_TELEMETRY_TOP_LEVEL_FIELDS = [
+  "contractHash",
+  "schemaVersion",
+  "generatedAt",
+  "root",
+  "hook",
+  "git",
+  "summary",
+  "groups",
+  "suppressions",
+  "bypassEvents",
+  "hookEvents",
+  "packageVocabularies",
+  "adoption",
+  "health",
+  "topology",
+  "source",
+  "gateRung",
+  "diffOnly",
+  "failOnWarnings"
+];
+var GOVERNANCE_TELEMETRY_FIELDS = [
+  {
+    path: "schemaVersion",
+    type: '"fragments-governance-report:v1"',
+    purpose: "Pins the accepted wire shape and compatibility policy.",
+    carriage: "none",
+    topLevelField: "schemaVersion"
+  },
+  {
+    path: "generatedAt",
+    type: "ISO-8601 string",
+    purpose: "Records when the CLI produced the report.",
+    carriage: "none",
+    topLevelField: "generatedAt"
+  },
+  {
+    path: "root.{workspaceRoot,packageRoot,packageName}",
+    type: "string fields",
+    purpose: "Identifies the scanned workspace and package roots.",
+    carriage: "none",
+    topLevelField: "root"
+  },
+  {
+    path: "hook.{installedAt,mode,agents[]}",
+    type: "installation metadata",
+    purpose: "Describes the local hook installation that produced evidence.",
+    carriage: "none",
+    topLevelField: "hook"
+  },
+  {
+    path: "git.{baseRef,headSha,branch,repoFullName,pullRequestNumber}",
+    type: "Git and provider identifiers",
+    purpose: "Attaches results to the correct repository, commit and pull request.",
+    carriage: "none",
+    topLevelField: "git"
+  },
+  {
+    path: "summary.{filesScanned,rulesActive,presetsLoaded[],groupCount,occurrenceCount,ignoredCount,classnamesScanned,classnamesDynamic,classnamesResolved,totalFindings,errorCount,warnCount,infoCount,passed}",
+    type: "counts, verdict and active preset names",
+    purpose: "Reports scan volume and result totals without finding rows.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.ignoredByReason.{reason}",
+    type: "configured reason name \u2192 count",
+    purpose: "Counts ignored findings by the reason configured by the repository.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.countsBySeverity.{error,warn,info}",
+    type: "severity counts",
+    purpose: "Counts findings in each fixed severity bucket.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.countsByCategory.{category}",
+    type: "configured category name \u2192 count",
+    purpose: "Counts findings by the rule categories present in the scan.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.integrity.{status,declared,fatalForCi,blockingCapable,summary}",
+    type: "governance-integrity verdict",
+    purpose: "Explains whether the resolved policy is capable of enforcement.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.integrity.families[].{id,armed,reason,remediation}",
+    type: "integrity-family status",
+    purpose: "Explains the enforcement readiness of each governance family.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.integrity.families[].rules[]",
+    type: "rule identifiers",
+    purpose: "Names the active rules contributing to an integrity family.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.integrity.armed[]",
+    type: "integrity-family identifiers",
+    purpose: "Names the governance families capable of enforcement.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.integrity.remediations[]",
+    type: "remediation messages",
+    purpose: "Explains how to make an inert or degraded policy effective.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.integrity.configDiagnostics[].{code,kind,severity,path,message}",
+    type: "configuration diagnostics",
+    purpose: "Reports inert or conflicting authored governance configuration.",
+    carriage: "structured-source",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.integrity.roster.{configured,active,inert}",
+    type: "rule roster counts",
+    purpose: "Counts configured, active and inert governance rules.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "summary.countsByBaselineState.{baselined,new}",
+    type: "baseline-state counts",
+    purpose: "Separates accepted baseline debt from newly introduced findings.",
+    carriage: "derived",
+    topLevelField: "summary"
+  },
+  {
+    path: "groups[].{groupId,ruleId,category,severity,packageRoot,filePath}",
+    type: "finding group metadata",
+    purpose: "Identifies each grouped rule failure and repository-relative path.",
+    carriage: "none",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].message",
+    type: "string",
+    purpose: "Explains the failure and may quote the offending source literal.",
+    carriage: "source-literal",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].normalizedOffense.kind",
+    type: "normalized-offense category",
+    purpose: "Names the kind of source offense represented by the group.",
+    carriage: "derived",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].normalizedOffense.raw",
+    type: "normalized source offense",
+    purpose: "Carries the exact offending source substring.",
+    carriage: "source-literal",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].normalizedOffense.canonical",
+    type: "normalized source offense",
+    purpose: "Carries the derived canonical representation of the offense.",
+    carriage: "derived",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].occurrences[].occurrenceId",
+    type: "stable occurrence identifier",
+    purpose: "Identifies one occurrence within a finding group.",
+    carriage: "derived",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].occurrences[].location.{file,line,column,endLine,endColumn}",
+    type: "repository-relative location",
+    purpose: "Places each occurrence at its exact file/line/column range.",
+    carriage: "none",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].occurrences[].area.{areaId,areaName,criticality,owners[],matchedGlob}",
+    type: "area identifiers, owners and criticality",
+    purpose: "Carries the configured product-area classification for the file.",
+    carriage: "structured-source",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].occurrences[].evidence[].factId",
+    type: "fact identifier",
+    purpose: "Links the occurrence to the extracted fact supporting it.",
+    carriage: "derived",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].occurrences[].evidence[].fact.kind",
+    type: "fact discriminator",
+    purpose: "Names the extracted rule-fact shape.",
+    carriage: "none",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].occurrences[].evidence[].fact.location.{file,line,column,endLine,endColumn}",
+    type: "repository-relative location",
+    purpose: "Locates the source-backed fact used as evidence.",
+    carriage: "none",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].occurrences[].evidence[].fact.{ruleSpecificField}",
+    type: "extensible rule-specific fact fields",
+    purpose: "Carries rule-specific parsed facts; fields may include selectors, properties and source values.",
+    carriage: "structured-source",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].suggestedReplacement.{kind,from,to,certainty,reason}",
+    type: "deterministic replacement",
+    purpose: "Carries the deterministic replacement the CLI can apply.",
+    carriage: "derived",
+    topLevelField: "groups"
+  },
+  {
+    path: "groups[].suggestedReplacement.edit.{file,start,end,replacement}",
+    type: "deterministic edit range",
+    purpose: "Locates and describes the exact edit the CLI can apply.",
+    carriage: "derived",
+    topLevelField: "groups"
+  },
+  {
+    path: "suppressions[].{id,kind,file,line,column,code,expiresOn,attachedLine,attachedTo,directive}",
+    type: "directive identity, location and attachment metadata",
+    purpose: "Reports matched in-source governance directives.",
+    carriage: "none",
+    topLevelField: "suppressions"
+  },
+  {
+    path: "suppressions[].reason",
+    type: "authored directive reason",
+    purpose: "Carries the repository-authored reason for the suppression.",
+    carriage: "source-literal",
+    topLevelField: "suppressions"
+  },
+  {
+    path: "bypassEvents[].{code,file,line}",
+    type: "rule code and source location",
+    purpose: "Records directives that actually bypassed a finding in this run.",
+    carriage: "none",
+    topLevelField: "bypassEvents"
+  },
+  {
+    path: "bypassEvents[].reason",
+    type: "authored directive reason",
+    purpose: "Carries the repository-authored reason for the bypass.",
+    carriage: "source-literal",
+    topLevelField: "bypassEvents"
+  },
+  {
+    path: "bypassEvents[].area.{areaId,areaName,criticality,matchedGlob}",
+    type: "configured product-area metadata",
+    purpose: "Classifies the bypass by its configured product area.",
+    carriage: "structured-source",
+    topLevelField: "bypassEvents"
+  },
+  {
+    path: "hookEvents[].{eventId,kind,ruleId,code,file,mode,agent,timestamp,reasonClass}",
+    type: "bounded hook decision receipts",
+    purpose: "Reports deny, downgrade, suppression and fail-open decisions.",
+    carriage: "none",
+    topLevelField: "hookEvents"
+  },
+  {
+    path: "packageVocabularies[].{source,packageName,status,manifestPath,digest,commit}",
+    type: "compiled canonical-package vocabulary records",
+    purpose: "Publishes package vocabulary proposed by authoritative local discovery.",
+    carriage: "structured-source",
+    topLevelField: "packageVocabularies"
+  },
+  {
+    path: "packageVocabularies[].roots[].{name,members[]}",
+    type: "compiled component roots and members",
+    purpose: "Publishes the canonical component vocabulary discovered from the package.",
+    carriage: "structured-source",
+    topLevelField: "packageVocabularies"
+  },
+  {
+    path: "adoption.{metricVersion,adoptedUsages,ownableUsages}",
+    type: "versioned component-identity usage counts",
+    purpose: "Records the exact numerator and denominator used for adoption history.",
+    carriage: "derived",
+    topLevelField: "adoption"
+  },
+  {
+    path: "adoption.shadows[].{componentKey,displayName,canonicalTarget,usageCount}",
+    type: "bounded component-identity summaries",
+    purpose: "Explains which shadow components are moving the adoption curve without uploading source.",
+    carriage: "derived",
+    topLevelField: "adoption"
+  },
+  {
+    path: "health.{metricVersion,checkedSites,violatingSites}",
+    type: "versioned contract-site counts",
+    purpose: "Records how many sites contract-scope rules inspected and how many distinct sites carried a finding.",
+    carriage: "derived",
+    topLevelField: "health"
+  },
+  {
+    path: "health.populations.{componentUsages,tokenReferences}",
+    type: "per-population site counts",
+    purpose: "Names the measured populations behind the checked-site denominator.",
+    carriage: "derived",
+    topLevelField: "health"
+  },
+  {
+    path: "topology.areaImpact[].{areaId,areaName,beforeOpen,afterOpen,introduced,persistent,resolved}",
+    type: "area identifiers and before/after counts",
+    purpose: "Reports bounded product-area impact totals.",
+    carriage: "derived",
+    topLevelField: "topology"
+  },
+  {
+    path: "contractHash",
+    type: "64-character FCID",
+    purpose: "Pins the exact compiled contract enforced by the run.",
+    carriage: "derived",
+    topLevelField: "contractHash"
+  },
+  {
+    path: "source",
+    type: '"ci"',
+    purpose: "Identifies the report producer.",
+    carriage: "none",
+    topLevelField: "source"
+  },
+  {
+    path: "gateRung",
+    type: '"ci" | "cli"',
+    purpose: "Identifies the enforcement rung that produced the verdict.",
+    carriage: "none",
+    topLevelField: "gateRung"
+  },
+  {
+    path: "diffOnly",
+    type: "boolean",
+    purpose: "States whether the scan was restricted to changed files.",
+    carriage: "none",
+    topLevelField: "diffOnly"
+  },
+  {
+    path: "failOnWarnings",
+    type: "boolean",
+    purpose: "States whether warnings were gating for this run.",
+    carriage: "none",
+    topLevelField: "failOnWarnings"
+  }
+];
+var GOVERNANCE_TELEMETRY_SOURCE_DISCLOSURE = "The report carries source text in named fields: offending literals, messages that may quote them, structured rule facts, authored suppression and bypass reasons, and compiled package vocabulary. It never uploads whole files, whole source lines or function bodies.";
+
+export {
+  GOVERNANCE_TELEMETRY_TOP_LEVEL_FIELDS,
+  GOVERNANCE_TELEMETRY_FIELDS,
+  GOVERNANCE_TELEMETRY_SOURCE_DISCLOSURE
+};
+//# sourceMappingURL=chunk-MZ4SW3TP.js.map

package/dist/chunk-MZ4SW3TP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/governance-telemetry.ts"],"sourcesContent":["/**\n * Public disclosure contract for `fragments-governance-report:v1`.\n *\n * Brace groups enumerate closed sibling fields without hiding additions behind\n * `*`. The three named placeholder fields are the only intentionally open\n * records: configured ignore reasons, configured categories, and rule-specific\n * evidence facts.\n */\nexport type GovernanceTelemetryCarriage =\n  | \"none\"\n  | \"derived\"\n  | \"source-literal\"\n  | \"structured-source\";\n\nexport interface GovernanceTelemetryField {\n  path: string;\n  type: string;\n  purpose: string;\n  carriage: GovernanceTelemetryCarriage;\n  topLevelField: GovernanceTelemetryTopLevelField;\n}\n\nexport const GOVERNANCE_TELEMETRY_TOP_LEVEL_FIELDS = [\n  \"contractHash\",\n  \"schemaVersion\",\n  \"generatedAt\",\n  \"root\",\n  \"hook\",\n  \"git\",\n  \"summary\",\n  \"groups\",\n  \"suppressions\",\n  \"bypassEvents\",\n  \"hookEvents\",\n  \"packageVocabularies\",\n  \"adoption\",\n  \"health\",\n  \"topology\",\n  \"source\",\n  \"gateRung\",\n  \"diffOnly\",\n  \"failOnWarnings\",\n] as const;\n\nexport type GovernanceTelemetryTopLevelField =\n  (typeof GOVERNANCE_TELEMETRY_TOP_LEVEL_FIELDS)[number];\n\nexport const GOVERNANCE_TELEMETRY_FIELDS = [\n  {\n    path: \"schemaVersion\",\n    type: '\"fragments-governance-report:v1\"',\n    purpose: \"Pins the accepted wire shape and compatibility policy.\",\n    carriage: \"none\",\n    topLevelField: \"schemaVersion\",\n  },\n  {\n    path: \"generatedAt\",\n    type: \"ISO-8601 string\",\n    purpose: \"Records when the CLI produced the report.\",\n    carriage: \"none\",\n    topLevelField: \"generatedAt\",\n  },\n  {\n    path: \"root.{workspaceRoot,packageRoot,packageName}\",\n    type: \"string fields\",\n    purpose: \"Identifies the scanned workspace and package roots.\",\n    carriage: \"none\",\n    topLevelField: \"root\",\n  },\n  {\n    path: \"hook.{installedAt,mode,agents[]}\",\n    type: \"installation metadata\",\n    purpose: \"Describes the local hook installation that produced evidence.\",\n    carriage: \"none\",\n    topLevelField: \"hook\",\n  },\n  {\n    path: \"git.{baseRef,headSha,branch,repoFullName,pullRequestNumber}\",\n    type: \"Git and provider identifiers\",\n    purpose: \"Attaches results to the correct repository, commit and pull request.\",\n    carriage: \"none\",\n    topLevelField: \"git\",\n  },\n  {\n    path: \"summary.{filesScanned,rulesActive,presetsLoaded[],groupCount,occurrenceCount,ignoredCount,classnamesScanned,classnamesDynamic,classnamesResolved,totalFindings,errorCount,warnCount,infoCount,passed}\",\n    type: \"counts, verdict and active preset names\",\n    purpose: \"Reports scan volume and result totals without finding rows.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.ignoredByReason.{reason}\",\n    type: \"configured reason name → count\",\n    purpose: \"Counts ignored findings by the reason configured by the repository.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.countsBySeverity.{error,warn,info}\",\n    type: \"severity counts\",\n    purpose: \"Counts findings in each fixed severity bucket.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.countsByCategory.{category}\",\n    type: \"configured category name → count\",\n    purpose: \"Counts findings by the rule categories present in the scan.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.integrity.{status,declared,fatalForCi,blockingCapable,summary}\",\n    type: \"governance-integrity verdict\",\n    purpose: \"Explains whether the resolved policy is capable of enforcement.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.integrity.families[].{id,armed,reason,remediation}\",\n    type: \"integrity-family status\",\n    purpose: \"Explains the enforcement readiness of each governance family.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.integrity.families[].rules[]\",\n    type: \"rule identifiers\",\n    purpose: \"Names the active rules contributing to an integrity family.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.integrity.armed[]\",\n    type: \"integrity-family identifiers\",\n    purpose: \"Names the governance families capable of enforcement.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.integrity.remediations[]\",\n    type: \"remediation messages\",\n    purpose: \"Explains how to make an inert or degraded policy effective.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.integrity.configDiagnostics[].{code,kind,severity,path,message}\",\n    type: \"configuration diagnostics\",\n    purpose: \"Reports inert or conflicting authored governance configuration.\",\n    carriage: \"structured-source\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.integrity.roster.{configured,active,inert}\",\n    type: \"rule roster counts\",\n    purpose: \"Counts configured, active and inert governance rules.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"summary.countsByBaselineState.{baselined,new}\",\n    type: \"baseline-state counts\",\n    purpose: \"Separates accepted baseline debt from newly introduced findings.\",\n    carriage: \"derived\",\n    topLevelField: \"summary\",\n  },\n  {\n    path: \"groups[].{groupId,ruleId,category,severity,packageRoot,filePath}\",\n    type: \"finding group metadata\",\n    purpose: \"Identifies each grouped rule failure and repository-relative path.\",\n    carriage: \"none\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].message\",\n    type: \"string\",\n    purpose: \"Explains the failure and may quote the offending source literal.\",\n    carriage: \"source-literal\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].normalizedOffense.kind\",\n    type: \"normalized-offense category\",\n    purpose: \"Names the kind of source offense represented by the group.\",\n    carriage: \"derived\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].normalizedOffense.raw\",\n    type: \"normalized source offense\",\n    purpose: \"Carries the exact offending source substring.\",\n    carriage: \"source-literal\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].normalizedOffense.canonical\",\n    type: \"normalized source offense\",\n    purpose: \"Carries the derived canonical representation of the offense.\",\n    carriage: \"derived\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].occurrences[].occurrenceId\",\n    type: \"stable occurrence identifier\",\n    purpose: \"Identifies one occurrence within a finding group.\",\n    carriage: \"derived\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].occurrences[].location.{file,line,column,endLine,endColumn}\",\n    type: \"repository-relative location\",\n    purpose: \"Places each occurrence at its exact file/line/column range.\",\n    carriage: \"none\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].occurrences[].area.{areaId,areaName,criticality,owners[],matchedGlob}\",\n    type: \"area identifiers, owners and criticality\",\n    purpose: \"Carries the configured product-area classification for the file.\",\n    carriage: \"structured-source\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].occurrences[].evidence[].factId\",\n    type: \"fact identifier\",\n    purpose: \"Links the occurrence to the extracted fact supporting it.\",\n    carriage: \"derived\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].occurrences[].evidence[].fact.kind\",\n    type: \"fact discriminator\",\n    purpose: \"Names the extracted rule-fact shape.\",\n    carriage: \"none\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].occurrences[].evidence[].fact.location.{file,line,column,endLine,endColumn}\",\n    type: \"repository-relative location\",\n    purpose: \"Locates the source-backed fact used as evidence.\",\n    carriage: \"none\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].occurrences[].evidence[].fact.{ruleSpecificField}\",\n    type: \"extensible rule-specific fact fields\",\n    purpose:\n      \"Carries rule-specific parsed facts; fields may include selectors, properties and source values.\",\n    carriage: \"structured-source\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].suggestedReplacement.{kind,from,to,certainty,reason}\",\n    type: \"deterministic replacement\",\n    purpose: \"Carries the deterministic replacement the CLI can apply.\",\n    carriage: \"derived\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"groups[].suggestedReplacement.edit.{file,start,end,replacement}\",\n    type: \"deterministic edit range\",\n    purpose: \"Locates and describes the exact edit the CLI can apply.\",\n    carriage: \"derived\",\n    topLevelField: \"groups\",\n  },\n  {\n    path: \"suppressions[].{id,kind,file,line,column,code,expiresOn,attachedLine,attachedTo,directive}\",\n    type: \"directive identity, location and attachment metadata\",\n    purpose: \"Reports matched in-source governance directives.\",\n    carriage: \"none\",\n    topLevelField: \"suppressions\",\n  },\n  {\n    path: \"suppressions[].reason\",\n    type: \"authored directive reason\",\n    purpose: \"Carries the repository-authored reason for the suppression.\",\n    carriage: \"source-literal\",\n    topLevelField: \"suppressions\",\n  },\n  {\n    path: \"bypassEvents[].{code,file,line}\",\n    type: \"rule code and source location\",\n    purpose: \"Records directives that actually bypassed a finding in this run.\",\n    carriage: \"none\",\n    topLevelField: \"bypassEvents\",\n  },\n  {\n    path: \"bypassEvents[].reason\",\n    type: \"authored directive reason\",\n    purpose: \"Carries the repository-authored reason for the bypass.\",\n    carriage: \"source-literal\",\n    topLevelField: \"bypassEvents\",\n  },\n  {\n    path: \"bypassEvents[].area.{areaId,areaName,criticality,matchedGlob}\",\n    type: \"configured product-area metadata\",\n    purpose: \"Classifies the bypass by its configured product area.\",\n    carriage: \"structured-source\",\n    topLevelField: \"bypassEvents\",\n  },\n  {\n    path: \"hookEvents[].{eventId,kind,ruleId,code,file,mode,agent,timestamp,reasonClass}\",\n    type: \"bounded hook decision receipts\",\n    purpose: \"Reports deny, downgrade, suppression and fail-open decisions.\",\n    carriage: \"none\",\n    topLevelField: \"hookEvents\",\n  },\n  {\n    path: \"packageVocabularies[].{source,packageName,status,manifestPath,digest,commit}\",\n    type: \"compiled canonical-package vocabulary records\",\n    purpose: \"Publishes package vocabulary proposed by authoritative local discovery.\",\n    carriage: \"structured-source\",\n    topLevelField: \"packageVocabularies\",\n  },\n  {\n    path: \"packageVocabularies[].roots[].{name,members[]}\",\n    type: \"compiled component roots and members\",\n    purpose: \"Publishes the canonical component vocabulary discovered from the package.\",\n    carriage: \"structured-source\",\n    topLevelField: \"packageVocabularies\",\n  },\n  {\n    path: \"adoption.{metricVersion,adoptedUsages,ownableUsages}\",\n    type: \"versioned component-identity usage counts\",\n    purpose: \"Records the exact numerator and denominator used for adoption history.\",\n    carriage: \"derived\",\n    topLevelField: \"adoption\",\n  },\n  {\n    path: \"adoption.shadows[].{componentKey,displayName,canonicalTarget,usageCount}\",\n    type: \"bounded component-identity summaries\",\n    purpose:\n      \"Explains which shadow components are moving the adoption curve without uploading source.\",\n    carriage: \"derived\",\n    topLevelField: \"adoption\",\n  },\n  {\n    path: \"health.{metricVersion,checkedSites,violatingSites}\",\n    type: \"versioned contract-site counts\",\n    purpose:\n      \"Records how many sites contract-scope rules inspected and how many distinct sites carried a finding.\",\n    carriage: \"derived\",\n    topLevelField: \"health\",\n  },\n  {\n    path: \"health.populations.{componentUsages,tokenReferences}\",\n    type: \"per-population site counts\",\n    purpose: \"Names the measured populations behind the checked-site denominator.\",\n    carriage: \"derived\",\n    topLevelField: \"health\",\n  },\n  {\n    path: \"topology.areaImpact[].{areaId,areaName,beforeOpen,afterOpen,introduced,persistent,resolved}\",\n    type: \"area identifiers and before/after counts\",\n    purpose: \"Reports bounded product-area impact totals.\",\n    carriage: \"derived\",\n    topLevelField: \"topology\",\n  },\n  {\n    path: \"contractHash\",\n    type: \"64-character FCID\",\n    purpose: \"Pins the exact compiled contract enforced by the run.\",\n    carriage: \"derived\",\n    topLevelField: \"contractHash\",\n  },\n  {\n    path: \"source\",\n    type: '\"ci\"',\n    purpose: \"Identifies the report producer.\",\n    carriage: \"none\",\n    topLevelField: \"source\",\n  },\n  {\n    path: \"gateRung\",\n    type: '\"ci\" | \"cli\"',\n    purpose: \"Identifies the enforcement rung that produced the verdict.\",\n    carriage: \"none\",\n    topLevelField: \"gateRung\",\n  },\n  {\n    path: \"diffOnly\",\n    type: \"boolean\",\n    purpose: \"States whether the scan was restricted to changed files.\",\n    carriage: \"none\",\n    topLevelField: \"diffOnly\",\n  },\n  {\n    path: \"failOnWarnings\",\n    type: \"boolean\",\n    purpose: \"States whether warnings were gating for this run.\",\n    carriage: \"none\",\n    topLevelField: \"failOnWarnings\",\n  },\n] as const satisfies readonly GovernanceTelemetryField[];\n\nexport const GOVERNANCE_TELEMETRY_SOURCE_DISCLOSURE =\n  \"The report carries source text in named fields: offending literals, messages that may quote them, structured rule facts, authored suppression and bypass reasons, and compiled package vocabulary. It never uploads whole files, whole source lines or function bodies.\";\n"],"mappings":";AAsBO,IAAM,wCAAwC;AAAA,EACnD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,IAAM,8BAA8B;AAAA,EACzC;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SACE;AAAA,IACF,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SACE;AAAA,IACF,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SACE;AAAA,IACF,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AACF;AAEO,IAAM,yCACX;","names":[]}