@usefragments/core 1.8.0 → 1.9.1

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { GOVERNANCE_TELEMETRY_FIELDS, GOVERNANCE_TELEMETRY_SOURCE_DISCLOSURE, GOVERNANCE_TELEMETRY_TOP_LEVEL_FIELDS, GovernanceTelemetryCarriage, GovernanceTelemetryField, GovernanceTelemetryTopLevelField } from './governance-telemetry.js';
-import { F as Finding, A as AgentFormat, E as EvidenceGrade, a as FindingFix } from './index-Cxk3SOQP.js';
-export { b as AGENT_FORMAT_SCHEMA_VERSION, c as AgentErrorEnvelope, d as AgentOutput, G as CanonicalGovernanceVerdict, e as EVIDENCE_ORDER, f as FindingReplaceClassTokenFix, g as FindingReplaceComponentFix, h as FindingReplaceImportFix, i as FindingReplacePropValueFix, j as FindingReplaceStyleValueFix, k as Fix, l as GovernanceVerdictMetadata, I as InspectClaim, m as InspectClaimTier, S as SuppressionDirective, V as ValidatorResult, n as Violation, o as agentErrorEnvelopeSchema, p as agentFormatSchema, q as agentIntegritySchema, r as agentOutputSchema, s as canBlock, t as factEvidenceSchema, u as factLocationSchema, v as findingFixSchema, w as findingReplaceClassTokenFixSchema, x as findingReplaceComponentFixSchema, y as findingReplaceImportFixSchema, z as findingReplacePropValueFixSchema, B as findingReplaceStyleValueFixSchema, C as findingSchema, D as fixSchema, H as governanceVerdictMetadataSchema, J as governanceVerdictSchema, K as normalizeFinding, L as normalizeSeverity, M as normalizeViolation, N as suppressionDirectiveSchema, O as validatorResultSchema, P as violationSchema } from './index-Cxk3SOQP.js';
+import { F as Finding, A as AgentFormat, E as EvidenceGrade, a as FindingFix } from './index-_sxhUNqx.js';
+export { b as AGENT_FORMAT_SCHEMA_VERSION, c as AgentErrorEnvelope, d as AgentOutput, G as CanonicalGovernanceVerdict, e as EVIDENCE_ORDER, f as FindingReplaceClassTokenFix, g as FindingReplaceComponentFix, h as FindingReplaceImportFix, i as FindingReplacePropValueFix, j as FindingReplaceStyleValueFix, k as Fix, l as GovernanceVerdictMetadata, I as InspectClaim, m as InspectClaimTier, S as SuppressionDirective, V as ValidatorResult, n as Violation, o as agentErrorEnvelopeSchema, p as agentFormatSchema, q as agentIntegritySchema, r as agentOutputSchema, s as canBlock, t as factEvidenceSchema, u as factLocationSchema, v as findingFixSchema, w as findingReplaceClassTokenFixSchema, x as findingReplaceComponentFixSchema, y as findingReplaceImportFixSchema, z as findingReplacePropValueFixSchema, B as findingReplaceStyleValueFixSchema, C as findingSchema, D as fixSchema, H as governanceVerdictMetadataSchema, J as governanceVerdictSchema, K as normalizeFinding, L as normalizeSeverity, M as normalizeViolation, N as suppressionDirectiveSchema, O as validatorResultSchema, P as violationSchema } from './index-_sxhUNqx.js';
 import { Severity } from './severity.js';
 export { SEVERITIES, SEVERITY_RANK, SEVERITY_WEIGHTS, SeverityLevel, compareSeverity, maxSeverity, severityLevel, severitySchema, sortBySeverity } from './severity.js';
 export { BridgeViolationInput, CODES, CodeCategory, CodeLifecycle, EXPLAIN_URL_BASE, FuiCode, bridgeSourceViolation, bridgeSourceViolations, byCode, byRuleId, explainUrlForCode } from './codes/index.js';
@@ -2224,7 +2224,7 @@ declare const bundleManifestComponentEntrySchema: z.ZodObject<{
         name: string;
     }[];
     file: string;
-    tier: "core" | "composition";
+    tier: "composition" | "core";
     description: string;
     publicSlug: string | null;
     propCount: number;
@@ -2245,7 +2245,7 @@ declare const bundleManifestComponentEntrySchema: z.ZodObject<{
         name: string;
     }[];
     file: string;
-    tier: "core" | "composition";
+    tier: "composition" | "core";
     description: string;
     publicSlug: string | null;
     propCount: number;
@@ -2354,7 +2354,7 @@ declare const bundleManifestSchema: z.ZodObject<{
             name: string;
         }[];
         file: string;
-        tier: "core" | "composition";
+        tier: "composition" | "core";
         description: string;
         publicSlug: string | null;
         propCount: number;
@@ -2375,7 +2375,7 @@ declare const bundleManifestSchema: z.ZodObject<{
             name: string;
         }[];
         file: string;
-        tier: "core" | "composition";
+        tier: "composition" | "core";
         description: string;
         publicSlug: string | null;
         propCount: number;
@@ -2398,7 +2398,7 @@ declare const bundleManifestSchema: z.ZodObject<{
             name: string;
         }[];
         file: string;
-        tier: "core" | "composition";
+        tier: "composition" | "core";
         description: string;
         publicSlug: string | null;
         propCount: number;
@@ -2444,7 +2444,7 @@ declare const bundleManifestSchema: z.ZodObject<{
             name: string;
         }[];
         file: string;
-        tier: "core" | "composition";
+        tier: "composition" | "core";
         description: string;
         publicSlug: string | null;
         propCount: number;
@@ -2552,6 +2552,7 @@ declare const bundleTokenFileSchema: z.ZodObject<{
         description?: string | undefined;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
+    schemaVersion: 1;
     flat: {
         value: string;
         path: string[];
@@ -2560,7 +2561,6 @@ declare const bundleTokenFileSchema: z.ZodObject<{
         type?: string | undefined;
         description?: string | undefined;
     }[];
-    schemaVersion: 1;
     catalogRevision: string;
     catalogUpdatedAt: string;
     categories: Record<string, {
@@ -2575,6 +2575,7 @@ declare const bundleTokenFileSchema: z.ZodObject<{
         count: number;
     }>;
 }, {
+    schemaVersion: 1;
     flat: {
         value: string;
         path: string[];
@@ -2583,7 +2584,6 @@ declare const bundleTokenFileSchema: z.ZodObject<{
         type?: string | undefined;
         description?: string | undefined;
     }[];
-    schemaVersion: 1;
     catalogRevision: string;
     catalogUpdatedAt: string;
     categories: Record<string, {
@@ -2637,8 +2637,8 @@ declare const bundleComponentShardSchema: z.ZodObject<{
         parentComponentName: z.ZodOptional<z.ZodString>;
         parentComponentKey: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        status: string;
         source: "design-system";
+        status: string;
         props: Record<string, unknown>;
         category: string;
         name: string;
@@ -2648,7 +2648,7 @@ declare const bundleComponentShardSchema: z.ZodObject<{
             componentId: string;
             name: string;
         }[];
-        tier: "core" | "composition";
+        tier: "composition" | "core";
         description: string;
         publicSlug: string | null;
         relations: Record<string, unknown>[];
@@ -2663,8 +2663,8 @@ declare const bundleComponentShardSchema: z.ZodObject<{
         parentComponentName?: string | undefined;
         parentComponentKey?: string | undefined;
     }, {
-        status: string;
         source: "design-system";
+        status: string;
         props: Record<string, unknown>;
         category: string;
         name: string;
@@ -2674,7 +2674,7 @@ declare const bundleComponentShardSchema: z.ZodObject<{
             componentId: string;
             name: string;
         }[];
-        tier: "core" | "composition";
+        tier: "composition" | "core";
         description: string;
         publicSlug: string | null;
         relations: Record<string, unknown>[];
@@ -2694,8 +2694,8 @@ declare const bundleComponentShardSchema: z.ZodObject<{
     componentId: string;
     file: string;
     component: {
-        status: string;
         source: "design-system";
+        status: string;
         props: Record<string, unknown>;
         category: string;
         name: string;
@@ -2705,7 +2705,7 @@ declare const bundleComponentShardSchema: z.ZodObject<{
             componentId: string;
             name: string;
         }[];
-        tier: "core" | "composition";
+        tier: "composition" | "core";
         description: string;
         publicSlug: string | null;
         relations: Record<string, unknown>[];
@@ -2727,8 +2727,8 @@ declare const bundleComponentShardSchema: z.ZodObject<{
     componentId: string;
     file: string;
     component: {
-        status: string;
         source: "design-system";
+        status: string;
         props: Record<string, unknown>;
         category: string;
         name: string;
@@ -2738,7 +2738,7 @@ declare const bundleComponentShardSchema: z.ZodObject<{
             componentId: string;
             name: string;
         }[];
-        tier: "core" | "composition";
+        tier: "composition" | "core";
         description: string;
         publicSlug: string | null;
         relations: Record<string, unknown>[];
@@ -7659,6 +7659,60 @@ declare const fragmentsConfigSchema: z.ZodObject<{
         }[] | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
+    components?: string[] | undefined;
+    screenshots?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
+    topology?: {
+        version: number;
+        areas: {
+            name: string;
+            criticality: "high" | "medium" | "low" | "revenue" | "regulated";
+            owners: string[];
+            id: string;
+            files: string[];
+            routes?: string[] | undefined;
+            priority?: number | undefined;
+        }[];
+        base?: "app" | "repo" | undefined;
+    } | undefined;
+    tokens?: z.objectOutputType<{
+        include: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+        sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodEffects<z.ZodString, string, string>;
+            format: z.ZodOptional<z.ZodEnum<["auto", "css", "scss", "dtcg", "tailwind"]>>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            format?: "tailwind" | "auto" | "css" | "scss" | "dtcg" | undefined;
+        }, {
+            path: string;
+            format?: "tailwind" | "auto" | "css" | "scss" | "dtcg" | undefined;
+        }>, "many">>;
+        packages: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        aliases: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        upstream: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            packageName: z.ZodString;
+            version: z.ZodOptional<z.ZodString>;
+            digest: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            packageName: string;
+            version?: string | undefined;
+            digest?: string | undefined;
+        }, {
+            packageName: string;
+            version?: string | undefined;
+            digest?: string | undefined;
+        }>, "many">>;
+        exclude: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+        themeSelectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        format: z.ZodOptional<z.ZodEnum<["auto", "css", "scss", "dtcg", "tailwind"]>>;
+        namespace: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+    performance?: "strict" | "relaxed" | "standard" | {
+        preset?: "strict" | "relaxed" | "standard" | undefined;
+        budgets?: {
+            bundleSize?: number | undefined;
+        } | undefined;
+    } | undefined;
     govern?: {
         components?: Record<string, {
             rules: ({
@@ -7887,60 +7941,6 @@ declare const fragmentsConfigSchema: z.ZodObject<{
             failOnInert: z.ZodOptional<z.ZodBoolean>;
         }, z.ZodTypeAny, "passthrough"> | undefined;
     } | undefined;
-    components?: string[] | undefined;
-    screenshots?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
-    topology?: {
-        version: number;
-        areas: {
-            name: string;
-            criticality: "high" | "medium" | "low" | "revenue" | "regulated";
-            owners: string[];
-            id: string;
-            files: string[];
-            routes?: string[] | undefined;
-            priority?: number | undefined;
-        }[];
-        base?: "app" | "repo" | undefined;
-    } | undefined;
-    tokens?: z.objectOutputType<{
-        include: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-        sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            path: z.ZodEffects<z.ZodString, string, string>;
-            format: z.ZodOptional<z.ZodEnum<["auto", "css", "scss", "dtcg", "tailwind"]>>;
-        }, "strip", z.ZodTypeAny, {
-            path: string;
-            format?: "tailwind" | "auto" | "css" | "scss" | "dtcg" | undefined;
-        }, {
-            path: string;
-            format?: "tailwind" | "auto" | "css" | "scss" | "dtcg" | undefined;
-        }>, "many">>;
-        packages: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        aliases: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        upstream: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            packageName: z.ZodString;
-            version: z.ZodOptional<z.ZodString>;
-            digest: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            packageName: string;
-            version?: string | undefined;
-            digest?: string | undefined;
-        }, {
-            packageName: string;
-            version?: string | undefined;
-            digest?: string | undefined;
-        }>, "many">>;
-        exclude: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-        themeSelectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        enabled: z.ZodOptional<z.ZodBoolean>;
-        format: z.ZodOptional<z.ZodEnum<["auto", "css", "scss", "dtcg", "tailwind"]>>;
-        namespace: z.ZodOptional<z.ZodString>;
-    }, z.ZodTypeAny, "passthrough"> | undefined;
-    performance?: "strict" | "relaxed" | "standard" | {
-        preset?: "strict" | "relaxed" | "standard" | undefined;
-        budgets?: {
-            bundleSize?: number | undefined;
-        } | undefined;
-    } | undefined;
     exclude?: string[] | undefined;
     include?: string[] | undefined;
     registry?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -7994,6 +7994,60 @@ declare const fragmentsConfigSchema: z.ZodObject<{
         }[] | undefined;
     } | undefined;
 }, {
+    components?: string[] | undefined;
+    screenshots?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
+    topology?: {
+        version: number;
+        areas: {
+            name: string;
+            criticality: "high" | "medium" | "low" | "revenue" | "regulated";
+            owners: string[];
+            id: string;
+            files: string[];
+            routes?: string[] | undefined;
+            priority?: number | undefined;
+        }[];
+        base?: "app" | "repo" | undefined;
+    } | undefined;
+    tokens?: z.objectInputType<{
+        include: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+        sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodEffects<z.ZodString, string, string>;
+            format: z.ZodOptional<z.ZodEnum<["auto", "css", "scss", "dtcg", "tailwind"]>>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            format?: "tailwind" | "auto" | "css" | "scss" | "dtcg" | undefined;
+        }, {
+            path: string;
+            format?: "tailwind" | "auto" | "css" | "scss" | "dtcg" | undefined;
+        }>, "many">>;
+        packages: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        aliases: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        upstream: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            packageName: z.ZodString;
+            version: z.ZodOptional<z.ZodString>;
+            digest: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            packageName: string;
+            version?: string | undefined;
+            digest?: string | undefined;
+        }, {
+            packageName: string;
+            version?: string | undefined;
+            digest?: string | undefined;
+        }>, "many">>;
+        exclude: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+        themeSelectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        format: z.ZodOptional<z.ZodEnum<["auto", "css", "scss", "dtcg", "tailwind"]>>;
+        namespace: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+    performance?: "strict" | "relaxed" | "standard" | {
+        preset?: "strict" | "relaxed" | "standard" | undefined;
+        budgets?: {
+            bundleSize?: number | undefined;
+        } | undefined;
+    } | undefined;
     govern?: {
         components?: Record<string, {
             rules: ({
@@ -8222,60 +8276,6 @@ declare const fragmentsConfigSchema: z.ZodObject<{
             failOnInert: z.ZodOptional<z.ZodBoolean>;
         }, z.ZodTypeAny, "passthrough"> | undefined;
     } | undefined;
-    components?: string[] | undefined;
-    screenshots?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
-    topology?: {
-        version: number;
-        areas: {
-            name: string;
-            criticality: "high" | "medium" | "low" | "revenue" | "regulated";
-            owners: string[];
-            id: string;
-            files: string[];
-            routes?: string[] | undefined;
-            priority?: number | undefined;
-        }[];
-        base?: "app" | "repo" | undefined;
-    } | undefined;
-    tokens?: z.objectInputType<{
-        include: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-        sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            path: z.ZodEffects<z.ZodString, string, string>;
-            format: z.ZodOptional<z.ZodEnum<["auto", "css", "scss", "dtcg", "tailwind"]>>;
-        }, "strip", z.ZodTypeAny, {
-            path: string;
-            format?: "tailwind" | "auto" | "css" | "scss" | "dtcg" | undefined;
-        }, {
-            path: string;
-            format?: "tailwind" | "auto" | "css" | "scss" | "dtcg" | undefined;
-        }>, "many">>;
-        packages: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        aliases: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        upstream: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            packageName: z.ZodString;
-            version: z.ZodOptional<z.ZodString>;
-            digest: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            packageName: string;
-            version?: string | undefined;
-            digest?: string | undefined;
-        }, {
-            packageName: string;
-            version?: string | undefined;
-            digest?: string | undefined;
-        }>, "many">>;
-        exclude: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-        themeSelectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        enabled: z.ZodOptional<z.ZodBoolean>;
-        format: z.ZodOptional<z.ZodEnum<["auto", "css", "scss", "dtcg", "tailwind"]>>;
-        namespace: z.ZodOptional<z.ZodString>;
-    }, z.ZodTypeAny, "passthrough"> | undefined;
-    performance?: "strict" | "relaxed" | "standard" | {
-        preset?: "strict" | "relaxed" | "standard" | undefined;
-        budgets?: {
-            bundleSize?: number | undefined;
-        } | undefined;
-    } | undefined;
     exclude?: string[] | undefined;
     include?: string[] | undefined;
     registry?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -9756,7 +9756,6 @@ declare const governedFragmentDefinitionSchema: z.ZodObject<{
         guidelines?: string[] | undefined;
         accessibility?: string[] | undefined;
     };
-    govern?: ((...args: unknown[]) => unknown) | undefined;
     composition?: {
         pattern?: "compound" | "simple" | "controlled" | "wrapper" | undefined;
         subComponents?: string[] | undefined;
@@ -9772,6 +9771,7 @@ declare const governedFragmentDefinitionSchema: z.ZodObject<{
         constraints?: string[] | undefined;
         typeDetails?: Record<string, unknown> | undefined;
     }> | undefined;
+    govern?: ((...args: unknown[]) => unknown) | undefined;
     contract?: {
         composition?: {
             rule: {
@@ -9902,7 +9902,6 @@ declare const governedFragmentDefinitionSchema: z.ZodObject<{
         guidelines?: string[] | undefined;
         accessibility?: string[] | undefined;
     };
-    govern?: ((...args: unknown[]) => unknown) | undefined;
     composition?: {
         pattern?: "compound" | "simple" | "controlled" | "wrapper" | undefined;
         subComponents?: string[] | undefined;
@@ -9918,6 +9917,7 @@ declare const governedFragmentDefinitionSchema: z.ZodObject<{
         constraints?: string[] | undefined;
         typeDetails?: Record<string, unknown> | undefined;
     }> | undefined;
+    govern?: ((...args: unknown[]) => unknown) | undefined;
     contract?: {
         composition?: {
             rule: {
@@ -11360,6 +11360,8 @@ declare const componentContractSchema: z.ZodObject<{
     };
     propsSummary: string[];
     $schema: string;
+    status?: "experimental" | "stable" | "deprecated" | "beta" | undefined;
+    tokens?: string[] | undefined;
     preview?: {
         css?: string[] | undefined;
         theme?: "light" | "dark" | undefined;
@@ -11367,8 +11369,6 @@ declare const componentContractSchema: z.ZodObject<{
         wrapperModule?: string | undefined;
         wrapperExport?: string | undefined;
     } | undefined;
-    status?: "experimental" | "stable" | "deprecated" | "beta" | undefined;
-    tokens?: string[] | undefined;
     contract?: {
         compoundChildren?: Record<string, {
             required?: boolean | undefined;
@@ -11446,6 +11446,8 @@ declare const componentContractSchema: z.ZodObject<{
     };
     propsSummary: string[];
     $schema: string;
+    status?: "experimental" | "stable" | "deprecated" | "beta" | undefined;
+    tokens?: string[] | undefined;
     preview?: {
         css?: string[] | undefined;
         theme?: "light" | "dark" | undefined;
@@ -11453,8 +11455,6 @@ declare const componentContractSchema: z.ZodObject<{
         wrapperModule?: string | undefined;
         wrapperExport?: string | undefined;
     } | undefined;
-    status?: "experimental" | "stable" | "deprecated" | "beta" | undefined;
-    tokens?: string[] | undefined;
     contract?: {
         compoundChildren?: Record<string, {
             required?: boolean | undefined;
@@ -11682,6 +11682,14 @@ interface MakeFindingInput {
     evidence: FactEvidence[];
     evidenceGrade?: EvidenceGrade;
     fingerprintIdentity: Record<string, unknown>;
+    /**
+     * Legacy identity tuple from before a fingerprint migration. When present,
+     * the finding also carries `previousFingerprint` (the legacy hash) so
+     * baseline classification can match records keyed on the old hash during
+     * the grace window. Position keys are permitted here — legacy identities
+     * are reproduced verbatim, contract violations included.
+     */
+    previousFingerprintIdentity?: Record<string, unknown>;
     fix?: FindingFix;
     attributes?: Record<string, unknown>;
 }

package/dist/index.js

@@ -159,7 +159,7 @@ import {
   suppressionDirectiveSchema,
   validatorResultSchema,
   violationSchema
-} from "./chunk-UUREQ4HD.js";
+} from "./chunk-DGHZQTLH.js";
 import {
   OWNED_PACKAGE_IDENTITY_EPOCH,
   OWNED_PACKAGE_IDENTITY_SOURCE_SHA256,
@@ -4682,13 +4682,21 @@ function isAriaHidden(props) {
 }
 
 // src/rules/finding.ts
+var POSITION_IDENTITY_KEYS = ["line", "column", "endLine", "endColumn", "offset", "location"];
 function makeFinding(input) {
   if (input.evidence.length === 0) {
     throw new Error(`makeFinding(${input.ruleId}): findings must carry at least one evidence fact`);
   }
+  const positionKeys = POSITION_IDENTITY_KEYS.filter((key) => key in input.fingerprintIdentity);
+  if (positionKeys.length > 0) {
+    throw new Error(
+      `makeFinding(${input.ruleId}): fingerprintIdentity must not contain position keys (${positionKeys.join(", ")}) \u2014 fingerprints hash what's wrong, never where it sits. Use a source-order occurrence index for repeats of the same identity.`
+    );
+  }
   const fingerprint = hash64Hex(
     canonicalJson({ ruleId: input.ruleId, ...input.fingerprintIdentity })
   );
+  const previousFingerprint = input.previousFingerprintIdentity ? hash64Hex(canonicalJson({ ruleId: input.ruleId, ...input.previousFingerprintIdentity })) : void 0;
   const code = byRuleId.get(input.ruleId);
   return normalizeFinding({
     ruleId: input.ruleId,
@@ -4698,6 +4706,7 @@ function makeFinding(input) {
     helpUrl: code?.explainUrl,
     message: input.message,
     fingerprint,
+    ...previousFingerprint !== void 0 ? { previousFingerprint } : {},
     location: input.location,
     evidence: input.evidence,
     evidenceGrade: input.evidenceGrade ?? "source_backed",
@@ -6746,6 +6755,7 @@ function ruleJsxPreferredImportPath(ix) {
   if (policies.length === 0) return [];
   const findings = [];
   const seen = /* @__PURE__ */ new Set();
+  const occurrences = /* @__PURE__ */ new Map();
   for (const usage of ix.byKind("usage_import")) {
     const bridgeGoverned = policies.some((policy) => bridgeGovernsUnderlyingImport(policy, usage));
     const matches = policies.filter((policy) => {
@@ -6766,6 +6776,9 @@ function ruleJsxPreferredImportPath(ix) {
       const key = `${policy.id}\0${usage.file}\0${usage.source}\0${usage.location.line}\0${usage.location.column}\0${importedIdentity}`;
       if (seen.has(key)) continue;
       seen.add(key);
+      const identityKey = `${usage.file}\0${usage.source}\0${policy.to}\0${importedIdentity}`;
+      const occurrence = occurrences.get(identityKey) ?? 0;
+      occurrences.set(identityKey, occurrence + 1);
       findings.push(
         makeFinding({
           ruleId: RULE_ID8,
@@ -6775,6 +6788,15 @@ function ruleJsxPreferredImportPath(ix) {
           location: usage.location,
           evidence: ix.evidence([usage.id, policy.id]),
           fingerprintIdentity: {
+            file: usage.file,
+            from: usage.source,
+            to: policy.to,
+            imported: policy.imported,
+            occurrence
+          },
+          // Grace window (baseline v1 → v2): the pre-migration hash keyed on
+          // line/column. Drop with the v1 dual-match after one release.
+          previousFingerprintIdentity: {
             file: usage.file,
             from: usage.source,
             to: policy.to,