@vyuhlabs/dxkit 2.4.6 → 2.4.7

package/dist/scoring/dimensions/security.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Security dimension — declarative scoring spec.
+ *
+ * Methodology: severity-dominant rating per ISO/IEC 5055 (automated
+ * source code quality measures, CISQ-driven) layered with CVSS v4
+ * (FIRST.org) for vulnerability severity bands. The spec encodes:
+ *
+ *   - Penalty deductions for secrets, private keys, `.env` in git,
+ *     code-pattern findings (semgrep et al), and dependency
+ *     vulnerabilities. Each penalty surfaces as a discrete Deduction
+ *     with a human-readable reason.
+ *   - Cap rules that bound the rating when specific blocker classes
+ *     are present (see `src/scoring/STANDARDS.md` for the cap
+ *     taxonomy):
+ *       trust-broken (40)        — committed credentials
+ *       uncertainty (65)         — dep-vuln scanner did not run
+ *       fixable-finding (79)     — open HIGH/CRITICAL code finding
+ *
+ * The evaluator (`evaluateSpec`) consumes this spec + a
+ * `SecurityScoreInput` and produces the canonical `ScoreResult`. Both
+ * the health audit's Security dimension and the standalone
+ * vulnerability scan call the same path — same input ⇒ same number
+ * by construction.
+ *
+ * Adapters that build `SecurityScoreInput` from their domain data:
+ *
+ *   - Health side: `src/analyzers/security/shallow.ts:toSecurityScoreInput`
+ *     reads from `ScoreInput { metrics, capabilities }`. Falls back
+ *     to grep-based HealthMetrics counts when `capabilities.codePatterns`
+ *     is absent (semgrep unavailable).
+ *   - Standalone side: `src/analyzers/security/actions.ts:countsFromReport`
+ *     reads from `SecurityReport.findings` by partitioning on rule +
+ *     category.
+ *
+ * Both adapters land on this same `SecurityScoreInput` shape; both
+ * dispatch through the same spec; both observe identical scores.
+ */
+import type { DimensionScoringSpec } from '../spec';
+/** Severity counts shape, kept inline for clarity at call sites. */
+interface SeverityCounts {
+    critical: number;
+    high: number;
+    medium: number;
+    low: number;
+}
+/**
+ * Clean partition of the security signal universe. Each finding the
+ * gather code emits maps to exactly one field — no double-counting,
+ * no missed contributions. Both health-side and standalone-side
+ * adapters produce this shape.
+ */
+export interface SecurityScoreInput {
+    /** Gitleaks-detected secrets (hardcoded credentials, API keys). */
+    secretFindings: number;
+    /** Private key / cert files on disk (*.key, *.pem). */
+    privateKeyFiles: number;
+    /** .env files tracked in git. */
+    envFilesInGit: number;
+    /**
+     * Semgrep code-pattern findings by severity. Includes eval/exec,
+     * TLS verification disabled, SQL injection, XSS, CORS, SSRF, and
+     * every other static-analysis pattern the active language packs'
+     * rulesets cover.
+     */
+    codeFindings: SeverityCounts;
+    /** Dependency-vulnerability counts unioned across active packs. */
+    depVulns: SeverityCounts;
+    /**
+     * True if at least one active pack's depVulns gather reached
+     * success OR cleanly reported `no-manifest`; false if any pack
+     * returned `unavailable` (tool absent / no output / parse fail).
+     *
+     * When false, the `dep-vulns-unavailable` cap fires and bounds
+     * the score at the uncertainty tier ceiling regardless of other
+     * signals — dxkit can't honestly claim a top-tier score when it
+     * couldn't actually scan the deps.
+     *
+     * Adapters MUST populate this from `DepVulnSummary.available`.
+     */
+    depVulnsAvailable: boolean;
+}
+export declare const SECURITY_SCORING_SPEC: DimensionScoringSpec<SecurityScoreInput>;
+export {};
+//# sourceMappingURL=security.d.ts.map

package/dist/scoring/dimensions/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/scoring/dimensions/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAEpD,oEAAoE;AACpE,UAAU,cAAc;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,eAAe,EAAE,MAAM,CAAC;IACxB,iCAAiC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,YAAY,EAAE,cAAc,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,EAAE,cAAc,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAUD,eAAO,MAAM,qBAAqB,EAAE,oBAAoB,CAAC,kBAAkB,CAoF1E,CAAC"}

package/dist/scoring/dimensions/security.js

@@ -0,0 +1,135 @@
+"use strict";
+/**
+ * Security dimension — declarative scoring spec.
+ *
+ * Methodology: severity-dominant rating per ISO/IEC 5055 (automated
+ * source code quality measures, CISQ-driven) layered with CVSS v4
+ * (FIRST.org) for vulnerability severity bands. The spec encodes:
+ *
+ *   - Penalty deductions for secrets, private keys, `.env` in git,
+ *     code-pattern findings (semgrep et al), and dependency
+ *     vulnerabilities. Each penalty surfaces as a discrete Deduction
+ *     with a human-readable reason.
+ *   - Cap rules that bound the rating when specific blocker classes
+ *     are present (see `src/scoring/STANDARDS.md` for the cap
+ *     taxonomy):
+ *       trust-broken (40)        — committed credentials
+ *       uncertainty (65)         — dep-vuln scanner did not run
+ *       fixable-finding (79)     — open HIGH/CRITICAL code finding
+ *
+ * The evaluator (`evaluateSpec`) consumes this spec + a
+ * `SecurityScoreInput` and produces the canonical `ScoreResult`. Both
+ * the health audit's Security dimension and the standalone
+ * vulnerability scan call the same path — same input ⇒ same number
+ * by construction.
+ *
+ * Adapters that build `SecurityScoreInput` from their domain data:
+ *
+ *   - Health side: `src/analyzers/security/shallow.ts:toSecurityScoreInput`
+ *     reads from `ScoreInput { metrics, capabilities }`. Falls back
+ *     to grep-based HealthMetrics counts when `capabilities.codePatterns`
+ *     is absent (semgrep unavailable).
+ *   - Standalone side: `src/analyzers/security/actions.ts:countsFromReport`
+ *     reads from `SecurityReport.findings` by partitioning on rule +
+ *     category.
+ *
+ * Both adapters land on this same `SecurityScoreInput` shape; both
+ * dispatch through the same spec; both observe identical scores.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECURITY_SCORING_SPEC = void 0;
+/**
+ * Helper: render a count phrase with proper plural ("1 secret" /
+ * "5 secrets"). Used by penalty + cap reason builders.
+ */
+function plural(n, singular, plural) {
+    return `${n} ${n === 1 ? singular : (plural ?? `${singular}s`)}`;
+}
+exports.SECURITY_SCORING_SPEC = {
+    dimension: 'security',
+    methodology: 'iso-iec-5055-severity-dominant',
+    baseline: 100,
+    penalties: [
+        {
+            id: 'secrets-present',
+            describe: (i) => `${plural(i.secretFindings, 'hardcoded secret')} detected`,
+            applies: (i) => i.secretFindings > 0,
+            delta: (i) => (i.secretFindings > 10 ? -25 : i.secretFindings > 5 ? -20 : -15),
+        },
+        {
+            id: 'private-key-files',
+            describe: (i) => `${plural(i.privateKeyFiles, 'private key / cert file')} on disk`,
+            applies: (i) => i.privateKeyFiles > 0,
+            delta: () => -20,
+        },
+        {
+            id: 'env-files-in-git',
+            describe: (i) => `${plural(i.envFilesInGit, '.env file')} tracked in git`,
+            applies: (i) => i.envFilesInGit > 0,
+            delta: () => -10,
+        },
+        {
+            id: 'code-findings-critical',
+            describe: (i) => `${plural(i.codeFindings.critical, 'CRITICAL code finding')} (static analysis)`,
+            applies: (i) => i.codeFindings.critical > 0,
+            delta: (i) => (i.codeFindings.critical > 10 ? -25 : i.codeFindings.critical > 5 ? -20 : -15),
+        },
+        {
+            id: 'code-findings-high',
+            describe: (i) => `${plural(i.codeFindings.high, 'HIGH code finding')} (static analysis)`,
+            applies: (i) => i.codeFindings.high > 0,
+            delta: (i) => (i.codeFindings.high > 5 ? -10 : -5),
+        },
+        {
+            id: 'code-findings-medium',
+            describe: (i) => `${plural(i.codeFindings.medium, 'MEDIUM code finding')} (static analysis)`,
+            applies: (i) => i.codeFindings.medium > 10,
+            delta: () => -5,
+        },
+        {
+            id: 'dep-vulns-critical',
+            describe: (i) => `${plural(i.depVulns.critical, 'CRITICAL dependency vulnerability')}`,
+            applies: (i) => i.depVulns.critical > 0,
+            delta: () => -15,
+        },
+        {
+            id: 'dep-vulns-high',
+            describe: (i) => `${plural(i.depVulns.high, 'HIGH dependency vulnerability')}`,
+            applies: (i) => i.depVulns.high > 0,
+            delta: (i) => (i.depVulns.high > 5 ? -10 : -5),
+        },
+    ],
+    caps: [
+        {
+            id: 'secrets-present',
+            tier: 'trust-broken',
+            describe: (i) => {
+                const parts = [];
+                if (i.secretFindings > 0)
+                    parts.push(plural(i.secretFindings, 'hardcoded secret'));
+                if (i.privateKeyFiles > 0)
+                    parts.push(plural(i.privateKeyFiles, 'private key file'));
+                if (i.envFilesInGit > 0)
+                    parts.push(plural(i.envFilesInGit, '.env in git'));
+                return `committed credentials present: ${parts.join(' + ')}`;
+            },
+            applies: (i) => i.secretFindings > 0 || i.privateKeyFiles > 0 || i.envFilesInGit > 0,
+        },
+        {
+            id: 'dep-vulns-unavailable',
+            tier: 'uncertainty',
+            describe: () => `dependency vulnerability scan did not run`,
+            applies: (i) => !i.depVulnsAvailable,
+        },
+        {
+            id: 'high-plus-code-open',
+            tier: 'fixable-finding',
+            describe: (i) => {
+                const total = i.codeFindings.critical + i.codeFindings.high;
+                return `${plural(total, 'open HIGH+ code finding')}`;
+            },
+            applies: (i) => i.codeFindings.critical > 0 || i.codeFindings.high > 0,
+        },
+    ],
+};
+//# sourceMappingURL=security.js.map

package/dist/scoring/dimensions/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/scoring/dimensions/security.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;;;AAiDH;;;GAGG;AACH,SAAS,MAAM,CAAC,CAAS,EAAE,QAAgB,EAAE,MAAe;IAC1D,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;AACnE,CAAC;AAEY,QAAA,qBAAqB,GAA6C;IAC7E,SAAS,EAAE,UAAU;IACrB,WAAW,EAAE,gCAAgC;IAC7C,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE;QACT;YACE,EAAE,EAAE,iBAAiB;YACrB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,kBAAkB,CAAC,WAAW;YAC3E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC;YACpC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E;QACD;YACE,EAAE,EAAE,mBAAmB;YACvB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,yBAAyB,CAAC,UAAU;YAClF,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC;YACrC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;SACjB;QACD;YACE,EAAE,EAAE,kBAAkB;YACtB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,iBAAiB;YACzE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC;YACnC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;SACjB;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,uBAAuB,CAAC,oBAAoB;YACjF,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,GAAG,CAAC;YAC3C,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F;QACD;YACE,EAAE,EAAE,oBAAoB;YACxB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,mBAAmB,CAAC,oBAAoB;YACxF,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC;YACvC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACnD;QACD;YACE,EAAE,EAAE,sBAAsB;YAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,qBAAqB,CAAC,oBAAoB;YAC5F,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE;YAC1C,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;SAChB;QACD;YACE,EAAE,EAAE,oBAAoB;YACxB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,mCAAmC,CAAC,EAAE;YACtF,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC;YACvC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;SACjB;QACD;YACE,EAAE,EAAE,gBAAgB;YACpB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,EAAE;YAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;YACnC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/C;KACF;IACD,IAAI,EAAE;QACJ;YACE,EAAE,EAAE,iBAAiB;YACrB,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;gBACd,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC;gBACnF,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;gBACrF,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;gBAC5E,OAAO,kCAAkC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,CAAC;YACD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC;SACrF;QACD;YACE,EAAE,EAAE,uBAAuB;YAC3B,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,2CAA2C;YAC3D,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB;SACrC;QACD;YACE,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;gBACd,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;gBAC5D,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,yBAAyB,CAAC,EAAE,CAAC;YACvD,CAAC;YACD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC;SACvE;KACF;CACF,CAAC"}

package/dist/scoring/dimensions/testing.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Testing dimension — declarative scoring spec.
+ *
+ * Methodology: additive checklist over test-discipline signals (test
+ * ratio, coverage-config presence, runner exit code, line-coverage
+ * thresholds) gated on test-file presence, plus a hygiene penalty
+ * for source that's predominantly commented-out code.
+ *
+ * Industry-conventional coverage thresholds: 60% (adequate), 80%
+ * (excellent). Sources: CodeClimate default config, SonarQube's
+ * Coverage on New Code quality-gate condition (default 80%), Google
+ * Testing on the Toilet recommendations. These thresholds are the
+ * de-facto convention; dxkit adopts them.
+ *
+ * Cap rule encodes the Label Contract: when coverage data is absent
+ * the dimension can't honestly claim a top-tier rating regardless of
+ * how many test files exist — file presence + a green exit code
+ * without line-coverage measurement is failing the most basic
+ * testing-discipline check.
+ *
+ *   unmeasured (35)   no coverage data available
+ *
+ * Source signal flow: the adapter (`src/analyzers/tests/shallow.ts`)
+ * builds `TestingScoreInput` from the health-side ScoreInput
+ * (HealthMetrics + CapabilityReport) and dispatches through
+ * `evaluateSpec`. The standalone test-gaps subcommand uses its own
+ * separate analyzer; this dimension only feeds the health rollup.
+ */
+import type { DimensionScoringSpec } from '../spec';
+/**
+ * Partition of every signal the Testing scorer reads. The adapter
+ * builds this shape; the spec stays consumer-agnostic.
+ */
+export interface TestingScoreInput {
+    /** Total source files (the denominator for test-ratio). */
+    sourceFiles: number;
+    /** Test files (discovered by name patterns per active language pack). */
+    testFiles: number;
+    /** True when at least one coverage config file is present
+     *  (jest.config + collectCoverage, vitest.config + coverage,
+     *  pytest.ini + --cov, etc.). */
+    coverageConfigExists: boolean;
+    /** Runner exit code: true=green, false=red, null=not invoked. */
+    testsPass: boolean | null;
+    /** Line-coverage percent (rounded integer). Null when no coverage
+     *  artifact was found — the most-conservative interpretation is
+     *  "we don't know" and triggers the unmeasured cap. */
+    coveragePercent: number | null;
+    /** From graphify: ratio of commented-out code in source files
+     *  (0.0–1.0). Beyond 0.5 the file is more dead/commented than
+     *  active code — a hygiene red flag worth penalizing. Null when
+     *  graphify didn't run. */
+    commentedCodeRatio: number | null;
+}
+export declare const TESTING_SCORING_SPEC: DimensionScoringSpec<TestingScoreInput>;
+//# sourceMappingURL=testing.d.ts.map

package/dist/scoring/dimensions/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../../src/scoring/dimensions/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB;;qCAEiC;IACjC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iEAAiE;IACjE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B;;2DAEuD;IACvD,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;+BAG2B;IAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,eAAO,MAAM,oBAAoB,EAAE,oBAAoB,CAAC,iBAAiB,CAqExE,CAAC"}

package/dist/scoring/dimensions/testing.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * Testing dimension — declarative scoring spec.
+ *
+ * Methodology: additive checklist over test-discipline signals (test
+ * ratio, coverage-config presence, runner exit code, line-coverage
+ * thresholds) gated on test-file presence, plus a hygiene penalty
+ * for source that's predominantly commented-out code.
+ *
+ * Industry-conventional coverage thresholds: 60% (adequate), 80%
+ * (excellent). Sources: CodeClimate default config, SonarQube's
+ * Coverage on New Code quality-gate condition (default 80%), Google
+ * Testing on the Toilet recommendations. These thresholds are the
+ * de-facto convention; dxkit adopts them.
+ *
+ * Cap rule encodes the Label Contract: when coverage data is absent
+ * the dimension can't honestly claim a top-tier rating regardless of
+ * how many test files exist — file presence + a green exit code
+ * without line-coverage measurement is failing the most basic
+ * testing-discipline check.
+ *
+ *   unmeasured (35)   no coverage data available
+ *
+ * Source signal flow: the adapter (`src/analyzers/tests/shallow.ts`)
+ * builds `TestingScoreInput` from the health-side ScoreInput
+ * (HealthMetrics + CapabilityReport) and dispatches through
+ * `evaluateSpec`. The standalone test-gaps subcommand uses its own
+ * separate analyzer; this dimension only feeds the health rollup.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TESTING_SCORING_SPEC = void 0;
+exports.TESTING_SCORING_SPEC = {
+    dimension: 'testing',
+    methodology: 'industry-coverage-thresholds',
+    // Additive baseline: every positive-delta signal contributes
+    // points; the zero-tests deduction surfaces the most-actionable
+    // customer case (no tests at all) with a real Top Action.
+    baseline: 0,
+    penalties: [
+        {
+            id: 'no-tests-found',
+            describe: (i) => `no test files found across ${i.sourceFiles} source files (start with the highest-risk untested files — see test-gaps)`,
+            applies: (i) => i.testFiles === 0,
+            // -60 mirrors the max bonus the test-ratio rule could grant at
+            // a healthy ratio. The score floors at 0 (E) either way, but
+            // surfacing the deduction makes the dimension actionable: the
+            // renderer shows "+60 — would lift rating E → C" and the
+            // severe-debt disclosure fires.
+            delta: () => -60,
+        },
+        {
+            id: 'test-ratio',
+            describe: (i) => `${i.testFiles} test files for ${i.sourceFiles} source files ` +
+                `(${((i.testFiles / Math.max(i.sourceFiles, 1)) * 100).toFixed(1)}% ratio)`,
+            applies: (i) => i.testFiles > 0,
+            delta: (i) => Math.min((i.testFiles / Math.max(i.sourceFiles, 1)) * 200, 60),
+        },
+        {
+            id: 'coverage-config-present',
+            describe: () => `coverage config detected`,
+            applies: (i) => i.testFiles > 0 && i.coverageConfigExists,
+            delta: () => 10,
+        },
+        {
+            id: 'tests-passing',
+            describe: () => `test runner reports green`,
+            applies: (i) => i.testFiles > 0 && i.testsPass === true,
+            delta: () => 15,
+        },
+        {
+            id: 'coverage-adequate',
+            describe: (i) => `line coverage ${i.coveragePercent}% (≥ 60% threshold met)`,
+            applies: (i) => i.testFiles > 0 && i.coveragePercent !== null && i.coveragePercent >= 60, // scoring-spec-ok: industry coverage threshold, not a rating boundary
+            delta: () => 10,
+        },
+        {
+            id: 'coverage-excellent',
+            describe: (i) => `line coverage ${i.coveragePercent}% (≥ 80% threshold met)`,
+            applies: (i) => i.testFiles > 0 && i.coveragePercent !== null && i.coveragePercent >= 80, // scoring-spec-ok: industry coverage threshold, not a rating boundary
+            delta: () => 5,
+        },
+        {
+            id: 'commented-code-density',
+            describe: (i) => `${((i.commentedCodeRatio ?? 0) * 100).toFixed(0)}% of source is commented-out code`,
+            applies: (i) => i.commentedCodeRatio !== null && i.commentedCodeRatio > 0.5,
+            delta: () => -15,
+        },
+    ],
+    caps: [
+        {
+            id: 'coverage-unmeasured',
+            tier: 'unmeasured',
+            describe: () => `no coverage data available — test runner did not produce a coverage artifact`,
+            applies: (i) => i.coveragePercent === null,
+        },
+    ],
+};
+//# sourceMappingURL=testing.js.map

package/dist/scoring/dimensions/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../../src/scoring/dimensions/testing.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AA8BU,QAAA,oBAAoB,GAA4C;IAC3E,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,8BAA8B;IAC3C,6DAA6D;IAC7D,gEAAgE;IAChE,0DAA0D;IAC1D,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE;QACT;YACE,EAAE,EAAE,gBAAgB;YACpB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,8BAA8B,CAAC,CAAC,WAAW,4EAA4E;YACzH,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC;YACjC,+DAA+D;YAC/D,6DAA6D;YAC7D,8DAA8D;YAC9D,yDAAyD;YACzD,gCAAgC;YAChC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;SACjB;QACD;YACE,EAAE,EAAE,YAAY;YAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,GAAG,CAAC,CAAC,SAAS,mBAAmB,CAAC,CAAC,WAAW,gBAAgB;gBAC9D,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YAC7E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC;YAC/B,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,CAAC;SAC7E;QACD;YACE,EAAE,EAAE,yBAAyB;YAC7B,QAAQ,EAAE,GAAG,EAAE,CAAC,0BAA0B;YAC1C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,oBAAoB;YACzD,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE;SAChB;QACD;YACE,EAAE,EAAE,eAAe;YACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,2BAA2B;YAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;YACvD,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE;SAChB;QACD;YACE,EAAE,EAAE,mBAAmB;YACvB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,eAAe,yBAAyB;YAC5E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,sEAAsE;YAChK,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE;SAChB;QACD;YACE,EAAE,EAAE,oBAAoB;YACxB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,eAAe,yBAAyB;YAC5E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,sEAAsE;YAChK,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;SACf;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC;YACtF,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,CAAC,kBAAkB,GAAG,GAAG;YAC3E,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;SACjB;KACF;IACD,IAAI,EAAE;QACJ;YACE,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,GAAG,EAAE,CACb,8EAA8E;YAChF,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI;SAC3C;KACF;CACF,CAAC"}

package/dist/scoring/evaluator.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Pure-function spec evaluator. The single code path every dimension's
+ * score travels through.
+ *
+ * Same spec + same input → same `ScoreResult`, every time. No I/O, no
+ * clock, no randomness. This is the determinism property dxkit's
+ * scoring depends on for cross-process consistency and for agents to
+ * verify expected score deltas after applying a fix.
+ *
+ * Algorithm:
+ *   1. Apply each penalty whose `applies(input)` is true; accumulate
+ *      deductions and a running score from `spec.baseline`.
+ *   2. Clamp the raw score to [0, 100].
+ *   3. Determine which caps apply; sort by ceiling ascending; the
+ *      first (lowest-ceiling) cap that binds (i.e. final > ceiling)
+ *      lowers the final score to that ceiling.
+ *   4. Compute uplift for each surfaced action:
+ *      - For deductions: bounded by the current cap (0 if a cap binds).
+ *      - For the binding cap: distance to the next-applicable ceiling
+ *        OR the post-clamp rawScore, whichever is lower.
+ *   5. Build `topActions` by sorting deductions + cap by uplift desc.
+ *      Annotate any action whose uplift crosses a rating boundary.
+ */
+import type { DimensionScoringSpec } from './spec';
+import type { ScoreResult } from './result';
+export declare function evaluateSpec<TInput>(spec: DimensionScoringSpec<TInput>, input: TInput): ScoreResult;
+//# sourceMappingURL=evaluator.d.ts.map

package/dist/scoring/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/scoring/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAEnD,OAAO,KAAK,EAAyB,WAAW,EAAa,MAAM,UAAU,CAAC;AAE9E,wBAAgB,YAAY,CAAC,MAAM,EACjC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,EAClC,KAAK,EAAE,MAAM,GACZ,WAAW,CAwGb"}

package/dist/scoring/evaluator.js

@@ -0,0 +1,124 @@
+"use strict";
+/**
+ * Pure-function spec evaluator. The single code path every dimension's
+ * score travels through.
+ *
+ * Same spec + same input → same `ScoreResult`, every time. No I/O, no
+ * clock, no randomness. This is the determinism property dxkit's
+ * scoring depends on for cross-process consistency and for agents to
+ * verify expected score deltas after applying a fix.
+ *
+ * Algorithm:
+ *   1. Apply each penalty whose `applies(input)` is true; accumulate
+ *      deductions and a running score from `spec.baseline`.
+ *   2. Clamp the raw score to [0, 100].
+ *   3. Determine which caps apply; sort by ceiling ascending; the
+ *      first (lowest-ceiling) cap that binds (i.e. final > ceiling)
+ *      lowers the final score to that ceiling.
+ *   4. Compute uplift for each surfaced action:
+ *      - For deductions: bounded by the current cap (0 if a cap binds).
+ *      - For the binding cap: distance to the next-applicable ceiling
+ *        OR the post-clamp rawScore, whichever is lower.
+ *   5. Build `topActions` by sorting deductions + cap by uplift desc.
+ *      Annotate any action whose uplift crosses a rating boundary.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateSpec = evaluateSpec;
+const thresholds_1 = require("./thresholds");
+function evaluateSpec(spec, input) {
+    const deductions = [];
+    let runningScore = spec.baseline;
+    for (const rule of spec.penalties) {
+        if (!rule.applies(input))
+            continue;
+        const delta = rule.delta(input);
+        runningScore += delta;
+        const upliftIfFixed = rule.upliftIfFixed ? rule.upliftIfFixed(input) : Math.abs(delta);
+        deductions.push({
+            id: rule.id,
+            reason: rule.describe(input),
+            delta,
+            upliftIfFixed,
+        });
+    }
+    const rawScore = runningScore;
+    const rawPenalty = rawScore - spec.baseline;
+    const scoreAfterClamp = Math.round(Math.max(0, Math.min(100, rawScore)));
+    const applicableCaps = spec.caps
+        .filter((cap) => cap.applies(input))
+        .map((cap) => ({ cap, ceiling: thresholds_1.CAP_TIERS[cap.tier] }))
+        .sort((a, b) => a.ceiling - b.ceiling);
+    let finalScore = scoreAfterClamp;
+    let bindingCap = null;
+    for (let i = 0; i < applicableCaps.length; i++) {
+        const { cap, ceiling } = applicableCaps[i];
+        if (finalScore <= ceiling)
+            continue;
+        // Uplift if THIS cap were lifted: next-most-aggressive cap takes
+        // over, or the unclamped post-penalty score (capped at 100) bounds
+        // if no other cap applies.
+        const nextCap = applicableCaps[i + 1];
+        const ceilingIfRemoved = nextCap ? Math.min(scoreAfterClamp, nextCap.ceiling) : scoreAfterClamp;
+        bindingCap = {
+            id: cap.id,
+            tier: cap.tier,
+            ceiling,
+            reason: cap.describe(input),
+            upliftIfRemoved: ceilingIfRemoved - ceiling,
+        };
+        finalScore = ceiling;
+        break;
+    }
+    const capsApplied = bindingCap ? [bindingCap] : [];
+    // Compute effective uplift for each deduction. When a cap binds,
+    // fixing a non-cap deduction can't raise the score past the ceiling,
+    // so uplift reads as 0 — surfaces the cap as the real top action.
+    const effectiveDeductionUplift = (d) => {
+        if (bindingCap)
+            return 0;
+        const headroom = 100 - finalScore;
+        return Math.max(0, Math.min(d.upliftIfFixed, headroom));
+    };
+    const currentRating = (0, thresholds_1.ratingFromScore)(finalScore);
+    const projectRating = (uplift) => (0, thresholds_1.ratingFromScore)(Math.min(100, finalScore + uplift));
+    const buildTopActions = () => {
+        const actions = [];
+        for (const d of deductions) {
+            const uplift = effectiveDeductionUplift(d);
+            if (uplift <= 0)
+                continue;
+            const projected = projectRating(uplift);
+            actions.push({
+                source: 'deduction',
+                id: d.id,
+                reason: d.reason,
+                upliftIfFixed: uplift,
+                ratingTransition: projected !== currentRating ? { from: currentRating, to: projected } : undefined,
+            });
+        }
+        if (bindingCap && bindingCap.upliftIfRemoved > 0) {
+            const projected = projectRating(bindingCap.upliftIfRemoved);
+            actions.push({
+                source: 'cap',
+                id: bindingCap.id,
+                reason: bindingCap.reason,
+                upliftIfFixed: bindingCap.upliftIfRemoved,
+                ratingTransition: projected !== currentRating ? { from: currentRating, to: projected } : undefined,
+            });
+        }
+        actions.sort((a, b) => b.upliftIfFixed - a.upliftIfFixed);
+        return actions;
+    };
+    return {
+        dimension: spec.dimension,
+        methodology: spec.methodology,
+        rating: currentRating,
+        score: finalScore,
+        rawScore,
+        rawPenalty,
+        deductions,
+        capsApplied,
+        topActions: buildTopActions(),
+    };
+}
+//# sourceMappingURL=evaluator.js.map

package/dist/scoring/evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../../src/scoring/evaluator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;AAMH,oCA2GC;AA9GD,6CAA0D;AAG1D,SAAgB,YAAY,CAC1B,IAAkC,EAClC,KAAa;IAEb,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,YAAY,IAAI,KAAK,CAAC;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvF,UAAU,CAAC,IAAI,CAAC;YACd,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC5B,KAAK;YACL,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC;IAC9B,MAAM,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEzE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI;SAC7B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,UAAU,GAAG,eAAe,CAAC;IACjC,IAAI,UAAU,GAAsB,IAAI,CAAC;IAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,UAAU,IAAI,OAAO;YAAE,SAAS;QACpC,iEAAiE;QACjE,mEAAmE;QACnE,2BAA2B;QAC3B,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;QAChG,UAAU,GAAG;YACX,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO;YACP,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC3B,eAAe,EAAE,gBAAgB,GAAG,OAAO;SAC5C,CAAC;QACF,UAAU,GAAG,OAAO,CAAC;QACrB,MAAM;IACR,CAAC;IAED,MAAM,WAAW,GAA0B,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1E,iEAAiE;IACjE,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,wBAAwB,GAAG,CAAC,CAAY,EAAU,EAAE;QACxD,IAAI,UAAU;YAAE,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,GAAG,GAAG,UAAU,CAAC;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,IAAA,4BAAe,EAAC,UAAU,CAAC,CAAC;IAElD,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC;IAE9F,MAAM,eAAe,GAAG,GAAyB,EAAE;QACjD,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,MAAM,IAAI,CAAC;gBAAE,SAAS;YAC1B,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,WAAW;gBACnB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,aAAa,EAAE,MAAM;gBACrB,gBAAgB,EACd,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;aACnF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,UAAU,IAAI,UAAU,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,KAAK;gBACb,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,aAAa,EAAE,UAAU,CAAC,eAAe;gBACzC,gBAAgB,EACd,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;aACnF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,UAAU;QACjB,QAAQ;QACR,UAAU;QACV,UAAU;QACV,WAAW;QACX,UAAU,EAAE,eAAe,EAAE;KAC9B,CAAC;AACJ,CAAC"}

package/dist/scoring/format.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Renderer helpers — turn a `ScoreResult`'s structured provenance
+ * into markdown the customer can act on.
+ *
+ * These functions don't know which dimension they're rendering; they
+ * read `topActions[]` + `capsApplied[]` from any spec output and
+ * produce consistent prose. Per-dimension renderers (the analyzer
+ * subdirs) call into here so the "Top Actions" surface looks the
+ * same across every dimension's report.
+ */
+import type { CapApplied, ScoreResult, TopAction } from './result';
+/**
+ * Subset of `DimensionScore` the formatters need. Lets the health-side
+ * `DimensionScore` and any future direct `ScoreResult` consumer share
+ * the same renderer without coupling on the full health type.
+ */
+export interface ScoreResultLike {
+    readonly score: number;
+    readonly rating: ScoreResult['rating'];
+    readonly rawScore?: number;
+    readonly rawPenalty?: number;
+    readonly capsApplied?: readonly CapApplied[];
+    readonly topActions?: readonly TopAction[];
+}
+/** One-line top-action summary, suitable for table cells / CLI grids. */
+export declare function formatTopActionLine(score: ScoreResultLike): string;
+/**
+ * Markdown block listing the top N actions for a dimension. Returns
+ * an empty array (no lines) when the dimension has no actionable
+ * items — caller decides whether to suppress the section header in
+ * that case.
+ */
+export declare function formatTopActionsBlock(score: ScoreResultLike, limit?: number): string[];
+//# sourceMappingURL=format.d.ts.map

package/dist/scoring/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/scoring/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;CAC5C;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAQlE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,SAAI,GAAG,MAAM,EAAE,CAmCjF"}