@zigrivers/mmr 1.3.0 → 1.4.0

package/dist/core/reconciler.js

@@ -1,7 +1,5 @@
 import { SEVERITY_ORDER } from '../types.js';
-function normalizeLocation(location) {
-    return location.toLowerCase().trim();
-}
+import { computeFindingKey, descriptionShingle, jaccardSimilarity, normalizeLocationForKey, normalizeSuggestionForKey, shingleSize, } from './stable-id.js';
 function higherSeverity(a, b) {
     return SEVERITY_ORDER[a] <= SEVERITY_ORDER[b] ? a : b;
 }
@@ -10,33 +8,70 @@ function higherSeverity(a, b) {
  * consensus scoring.
  *
  * 1. Flatten all findings with source attribution
- * 2. Group by normalized location
+ * 2. Group by stable finding identity
  * 3. For each group, determine agreement, confidence, and effective severity
  * 4. Sort by severity (P0 first)
  */
 export function reconcile(channelFindings) {
-    // Step 1: Flatten with source attribution
+    // Step 1: Flatten with source attribution and stable identity data
     const attributed = [];
     for (const [source, findings] of Object.entries(channelFindings)) {
         for (const finding of findings) {
-            attributed.push({ ...finding, source });
+            attributed.push({
+                ...finding,
+                source,
+                finding_key: computeFindingKey(finding),
+                normalized_location: normalizeLocationForKey(finding.location),
+                normalized_category: (finding.category ?? '').toLowerCase(),
+                normalized_suggestion: normalizeSuggestionForKey(finding.suggestion),
+                shingle: new Set(descriptionShingle(finding.description)),
+            });
         }
     }
     if (attributed.length === 0)
         return [];
-    // Step 2: Group by normalized location
-    const groups = new Map();
+    attributed.sort(compareAttributedFindings);
+    // Step 2: Group by exact stable identity, then location-anchored fuzzy description match.
+    const groups = [];
+    const keyIndex = new Map();
     for (const finding of attributed) {
-        const key = normalizeLocation(finding.location);
-        const group = groups.get(key) ?? [];
-        group.push(finding);
-        groups.set(key, group);
+        // Multiple groups can share a finding_key because location normalization
+        // strips line spans. Keep same-source findings at different raw locations
+        // separate, then join later channels to the compatible raw-location group.
+        const exact = bestJoinableGroup((keyIndex.get(finding.finding_key) ?? [])
+            .filter((group) => canJoinGroup(group, finding)), finding);
+        if (exact !== undefined) {
+            exact.findings.push(finding);
+            continue;
+        }
+        const fuzzy = bestJoinableGroup(groups.filter((group) => canJoinGroup(group, finding) &&
+            group.normalized_location === finding.normalized_location &&
+            canFuzzyJoinGroup(group, finding) &&
+            shingleSize(group.shingle) > 0 &&
+            shingleSize(finding.shingle) > 0 &&
+            jaccardSimilarity(group.shingle, finding.shingle) >= 0.7), finding);
+        if (fuzzy !== undefined) {
+            fuzzy.findings.push(finding);
+            addToKeyIndex(keyIndex, finding.finding_key, fuzzy);
+            continue;
+        }
+        const group = {
+            finding_key: finding.finding_key,
+            normalized_location: finding.normalized_location,
+            normalized_category: finding.normalized_category,
+            normalized_suggestion: finding.normalized_suggestion,
+            shingle: finding.shingle,
+            findings: [finding],
+        };
+        groups.push(group);
+        addToKeyIndex(keyIndex, finding.finding_key, group);
     }
     // Step 3: Reconcile each group
     const results = [];
-    for (const group of groups.values()) {
-        const sources = [...new Set(group.map((f) => f.source))];
-        const severities = [...new Set(group.map((f) => f.severity))];
+    for (const group of groups) {
+        const findings = group.findings;
+        const sources = [...new Set(findings.map((f) => f.source))];
+        const severities = [...new Set(findings.map((f) => f.severity))];
         const effectiveSeverity = severities.reduce(higherSeverity);
         let agreement;
         let confidence;
@@ -61,7 +96,7 @@ export function reconcile(channelFindings) {
                     : 'medium';
         }
         // Use the finding with the longest description as representative (deterministic)
-        const representative = group.reduce((best, current) => current.description.length > best.description.length ? current : best);
+        const representative = findings.reduce((best, current) => current.description.length > best.description.length ? current : best);
         results.push({
             severity: effectiveSeverity,
             location: representative.location,
@@ -72,10 +107,14 @@ export function reconcile(channelFindings) {
             confidence,
             sources,
             agreement,
+            finding_key: representative.finding_key,
+            description_shingle: [...representative.shingle],
         });
     }
     // Step 4: Sort by severity (P0 first)
-    results.sort((a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity]);
+    results.sort((a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity] ||
+        (a.finding_key ?? '').localeCompare(b.finding_key ?? '') ||
+        a.location.localeCompare(b.location));
     // Auto-generate finding IDs (only backfill when absent)
     results.forEach((f, i) => {
         if (!f.id) {
@@ -84,13 +123,56 @@ export function reconcile(channelFindings) {
     });
     return results;
 }
+function compareAttributedFindings(a, b) {
+    return a.finding_key.localeCompare(b.finding_key) ||
+        a.source.localeCompare(b.source) ||
+        a.location.localeCompare(b.location) ||
+        a.description.localeCompare(b.description) ||
+        a.suggestion.localeCompare(b.suggestion);
+}
+function canJoinGroup(group, finding) {
+    return group.findings.every((existing) => existing.source !== finding.source || existing.location === finding.location);
+}
+function canFuzzyJoinGroup(group, finding) {
+    if (group.findings.some((existing) => existing.location === finding.location)) {
+        return true;
+    }
+    return group.normalized_category === finding.normalized_category &&
+        group.normalized_suggestion === finding.normalized_suggestion;
+}
+function bestJoinableGroup(groups, finding) {
+    const eligible = [...groups].sort((a, b) => compareGroupsForFinding(a, b, finding));
+    return eligible.find((group) => group.findings.some((existing) => existing.location === finding.location)) ?? eligible[0];
+}
+function compareGroupsForFinding(a, b, finding) {
+    return groupMatchScore(b, finding) - groupMatchScore(a, finding) ||
+        a.finding_key.localeCompare(b.finding_key) ||
+        a.normalized_location.localeCompare(b.normalized_location);
+}
+function groupMatchScore(group, finding) {
+    let score = 0;
+    if (group.normalized_category === finding.normalized_category)
+        score += 1;
+    if (group.normalized_suggestion === finding.normalized_suggestion)
+        score += 1;
+    return score;
+}
+function addToKeyIndex(keyIndex, findingKey, group) {
+    const groups = keyIndex.get(findingKey);
+    if (groups === undefined) {
+        keyIndex.set(findingKey, [group]);
+    }
+    else if (!groups.includes(group)) {
+        groups.push(group);
+    }
+}
 /**
  * Evaluate the quality gate: passes if no finding has severity at or above
  * the threshold (i.e., no finding with SEVERITY_ORDER <= threshold order).
  */
 export function evaluateGate(findings, threshold) {
     const thresholdOrder = SEVERITY_ORDER[threshold];
-    return findings.every((f) => SEVERITY_ORDER[f.severity] > thresholdOrder);
+    return findings.every((f) => f.acknowledged === true || SEVERITY_ORDER[f.severity] > thresholdOrder);
 }
 /**
  * Derive the review verdict from gate evaluation and channel health.

package/dist/core/reconciler.js.map

@@ -1 +1 @@
-{"version":3,"file":"reconciler.js","sourceRoot":"","sources":["../../src/core/reconciler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAM5C,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAA;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,CAAW,EAAE,CAAW;IAC9C,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,eAA0C;IAClE,0CAA0C;IAC1C,MAAM,UAAU,GAAwB,EAAE,CAAA;IAC1C,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEtC,uCAAuC;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IACrD,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACnC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACxB,CAAC;IAED,+BAA+B;IAC/B,MAAM,OAAO,GAAwB,EAAE,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC7D,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;QAE3D,IAAI,SAAoB,CAAA;QACxB,IAAI,UAAsB,CAAA;QAE1B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,+CAA+C;gBAC/C,SAAS,GAAG,WAAW,CAAA;gBACvB,UAAU,GAAG,MAAM,CAAA;YACrB,CAAC;iBAAM,CAAC;gBACN,qDAAqD;gBACrD,SAAS,GAAG,UAAU,CAAA;gBACtB,UAAU,GAAG,QAAQ,CAAA;YACvB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,0BAA0B;YAC1B,SAAS,GAAG,QAAQ,CAAA;YACpB,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;YAC7D,UAAU,GAAG,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM;gBAC9C,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK;oBACtB,CAAC,CAAC,QAAQ,CAAA;QAChB,CAAC;QAED,iFAAiF;QACjF,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACpD,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACtE,CAAA;QAED,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,UAAU,EAAE,cAAc,CAAC,UAAU;YACrC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,cAAc,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,UAAU;YACV,OAAO;YACP,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED,sCAAsC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IAE/E,wDAAwD;IACxD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,CAAC,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;QAC9C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAA6B,EAAE,SAAmB;IAC7E,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IAChD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAmB,EACnB,eAA8C;IAE9C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM,CAAA;IAErE,qDAAqD;IACrD,IAAI,cAAc,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAA;IAEtD,+CAA+C;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IAEjC,gDAAgD;IAChD,IAAI,cAAc,GAAG,QAAQ,CAAC,MAAM;QAAE,OAAO,eAAe,CAAA;IAE5D,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"reconciler.js","sourceRoot":"","sources":["../../src/core/reconciler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,yBAAyB,EACzB,WAAW,GACZ,MAAM,gBAAgB,CAAA;AAoBvB,SAAS,cAAc,CAAC,CAAW,EAAE,CAAW;IAC9C,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,eAA0C;IAClE,mEAAmE;IACnE,MAAM,UAAU,GAAwB,EAAE,CAAA;IAC1C,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG,OAAO;gBACV,MAAM;gBACN,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;gBACvC,mBAAmB,EAAE,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC9D,mBAAmB,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC3D,qBAAqB,EAAE,yBAAyB,CAAC,OAAO,CAAC,UAAU,CAAC;gBACpE,OAAO,EAAE,IAAI,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;aAC1D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACtC,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAE1C,0FAA0F;IAC1F,MAAM,MAAM,GAAqB,EAAE,CAAA;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAA;IACpD,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;aACtE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAC5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC5B,SAAQ;QACV,CAAC;QAED,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACtD,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;YAC5B,KAAK,CAAC,mBAAmB,KAAK,OAAO,CAAC,mBAAmB;YACzD,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC;YACjC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAC9B,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YAChC,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,GAAG,CACzD,EAAE,OAAO,CAAC,CAAA;QACX,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC5B,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACnD,SAAQ;QACV,CAAC;QAED,MAAM,KAAK,GAAmB;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;YACpD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACrD,CAAC;IAED,+BAA+B;IAC/B,MAAM,OAAO,GAAwB,EAAE,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC3D,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QAChE,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;QAE3D,IAAI,SAAoB,CAAA;QACxB,IAAI,UAAsB,CAAA;QAE1B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,+CAA+C;gBAC/C,SAAS,GAAG,WAAW,CAAA;gBACvB,UAAU,GAAG,MAAM,CAAA;YACrB,CAAC;iBAAM,CAAC;gBACN,qDAAqD;gBACrD,SAAS,GAAG,UAAU,CAAA;gBACtB,UAAU,GAAG,QAAQ,CAAA;YACvB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,0BAA0B;YAC1B,SAAS,GAAG,QAAQ,CAAA;YACpB,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;YAC7D,UAAU,GAAG,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM;gBAC9C,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK;oBACtB,CAAC,CAAC,QAAQ,CAAA;QAChB,CAAC;QAED,iFAAiF;QACjF,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACvD,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACtE,CAAA;QAED,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,UAAU,EAAE,cAAc,CAAC,UAAU;YACrC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,cAAc,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,UAAU;YACV,OAAO;YACP,SAAS;YACT,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,mBAAmB,EAAE,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC;SACjD,CAAC,CAAA;IACJ,CAAC;IAED,sCAAsC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACpB,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvD,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CACrC,CAAA;IAED,wDAAwD;IACxD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,CAAC,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;QAC9C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,yBAAyB,CAAC,CAAoB,EAAE,CAAoB;IAC3E,OAAO,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QAChC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;QAC1C,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAqB,EAAE,OAA0B;IACrE,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAC7E,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAqB,EAAE,OAA0B;IAC1E,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAC,mBAAmB,KAAK,OAAO,CAAC,mBAAmB;QAC9D,KAAK,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB,CAAA;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAwB,EAAE,OAA0B;IAC7E,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IACnF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7B,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAC1E,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAA;AAClB,CAAC;AAED,SAAS,uBAAuB,CAAC,CAAiB,EAAE,CAAiB,EAAE,OAA0B;IAC/F,OAAO,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC;QAC9D,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;QAC1C,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAqB,EAAE,OAA0B;IACxE,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,CAAC,mBAAmB,KAAK,OAAO,CAAC,mBAAmB;QAAE,KAAK,IAAI,CAAC,CAAA;IACzE,IAAI,KAAK,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB;QAAE,KAAK,IAAI,CAAC,CAAA;IAC7E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,aAAa,CACpB,QAAuC,EACvC,UAAkB,EAClB,KAAqB;IAErB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IACnC,CAAC;SAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAA6B,EAAE,SAAmB;IAC7E,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IAChD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,CAAA;AACtG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAmB,EACnB,eAA8C;IAE9C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM,CAAA;IAErE,qDAAqD;IACrD,IAAI,cAAc,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAA;IAEtD,+CAA+C;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IAEjC,gDAAgD;IAChD,IAAI,cAAc,GAAG,QAAQ,CAAC,MAAM;QAAE,OAAO,eAAe,CAAA;IAE5D,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/core/redact.d.ts

@@ -0,0 +1,17 @@
+export declare function isSecretKey(name: string, options?: {
+    exemptEnvNameKeys?: boolean;
+}): boolean;
+/**
+ * Return a new record with secret-keyed values replaced by `<redacted>`.
+ * Non-secret keys pass through unchanged.
+ */
+export declare function redactRecord(input: Record<string, unknown> | undefined, options?: {
+    exemptEnvNameKeys?: boolean;
+}): Record<string, unknown>;
+/**
+ * Return a shallow copy of `channel` with `env` and `headers` redacted via
+ * `redactRecord`. `api_key_env` (the env-var NAME, not its value) is preserved
+ * as-is because the name is non-secret and useful for debugging.
+ */
+export declare function redactChannel(channel: Record<string, unknown>): Record<string, unknown>;
+//# sourceMappingURL=redact.d.ts.map

package/dist/core/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/core/redact.ts"],"names":[],"mappings":"AA+BA,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAShG;AAQD;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,OAAO,GAAE;IAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAyED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEvF"}

package/dist/core/redact.js

@@ -0,0 +1,140 @@
+/**
+ * Key parts whose VALUE should be redacted in any introspection output.
+ * Deliberately broad, but separator-aware: `api_key` is secret-like while
+ * harmless words such as `tokenizer`, `monkey`, or `author` are not.
+ * The top-level channel field `api_key_env` is intentionally non-secret (it
+ * stores the env-var name, not its value), but the same key inside env/headers
+ * records still carries a value and is redacted there.
+ */
+const SECRET_KEY_PARTS = new Set([
+    'auth',
+    'authorization',
+    'cookie',
+    'cred',
+    'credentials',
+    'creds',
+    'credential',
+    'apikey',
+    'pass',
+    'passphrase',
+    'passwd',
+    'password',
+    'secret',
+    'session',
+    'sid',
+    'signature',
+    'token',
+]);
+const NON_SECRET_ENV_NAME_KEYS = new Set(['api_key_env']);
+const KEY_PART_RE = /[_.-]+|(?<=[a-z0-9])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])/;
+const SENSITIVE_KEY_CONTEXT_PARTS = new Set(['api', 'openai', 'private', 'access']);
+export function isSecretKey(name, options = {}) {
+    const cleanName = name.replace(/^['"]|['"]$/g, '');
+    const normalized = cleanName.toLowerCase();
+    if (options.exemptEnvNameKeys !== false && NON_SECRET_ENV_NAME_KEYS.has(normalized))
+        return false;
+    const parts = cleanName.split(KEY_PART_RE).map((part) => part.toLowerCase());
+    if (parts.some((part) => SECRET_KEY_PARTS.has(part)))
+        return true;
+    if (!parts.includes('key'))
+        return false;
+    if (parts.length === 1)
+        return true;
+    return parts.some((part) => SENSITIVE_KEY_CONTEXT_PARTS.has(part));
+}
+function redactValue(value, options) {
+    if (Array.isArray(value))
+        return redactList(value, options);
+    if (value && typeof value === 'object')
+        return redactRecord(value, options);
+    return value;
+}
+/**
+ * Return a new record with secret-keyed values replaced by `<redacted>`.
+ * Non-secret keys pass through unchanged.
+ */
+export function redactRecord(input, options = {}) {
+    if (!input)
+        return {};
+    const out = {};
+    for (const [k, v] of Object.entries(input)) {
+        out[k] = isSecretKey(k, options) ? '<redacted>' : redactValue(v, { ...options, exemptEnvNameKeys: false });
+    }
+    return out;
+}
+function redactKeyValueString(input) {
+    const match = /^(\s*)([^:=\s]+)(\s*[:=]\s*)(.*)$/.exec(input);
+    if (!match)
+        return isSecretKey(input.trim(), { exemptEnvNameKeys: false }) ? '<redacted>' : input;
+    const [, leading, key, separator, value] = match;
+    if (isSecretKey(key, { exemptEnvNameKeys: false }) || containsNestedSecretKeyValue(value)) {
+        return `${leading}${key}${separator}<redacted>`;
+    }
+    return `${leading}${key}${separator}${value}`;
+}
+function containsNestedSecretKeyValue(input) {
+    const nestedKeyValueRe = /(?:^|[=:])"?([A-Za-z0-9_.-]+)"?\s*[:=]/g;
+    for (const match of input.matchAll(nestedKeyValueRe)) {
+        if (isSecretKey(match[1], { exemptEnvNameKeys: false }))
+            return true;
+    }
+    return false;
+}
+function redactList(input, options = { exemptEnvNameKeys: false }) {
+    const out = [];
+    for (let i = 0; i < input.length; i += 1) {
+        const value = input[i];
+        if (typeof value === 'string' &&
+            typeof input[i + 1] === 'string' &&
+            isSecretKey(value, { exemptEnvNameKeys: false })) {
+            out.push(value, '<redacted>');
+            i += 1;
+            continue;
+        }
+        if (typeof value === 'string') {
+            out.push(redactKeyValueString(value));
+            continue;
+        }
+        if (Array.isArray(value)) {
+            const key = value[0];
+            const rest = value.slice(2);
+            if (typeof key === 'string' && value.length === 1) {
+                out.push([redactKeyValueString(key)]);
+                continue;
+            }
+            if (typeof key === 'string' && isSecretKey(key, { exemptEnvNameKeys: false }) && value.length >= 2) {
+                out.push([key, '<redacted>', ...redactList(rest, options)]);
+            }
+            else {
+                out.push(redactList(value, options));
+            }
+            continue;
+        }
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            const original = value;
+            const secretLabel = (typeof original.name === 'string' && isSecretKey(original.name, { exemptEnvNameKeys: false })) ||
+                (typeof original.key === 'string' && isSecretKey(original.key, { exemptEnvNameKeys: false }));
+            const redacted = redactRecord(value, options);
+            if (typeof original.name === 'string')
+                redacted.name = original.name;
+            if (typeof original.key === 'string')
+                redacted.key = original.key;
+            if (secretLabel && 'value' in redacted) {
+                redacted.value = '<redacted>';
+            }
+            out.push(redacted);
+            continue;
+        }
+        out.push(value);
+    }
+    return out;
+}
+/**
+ * Return a shallow copy of `channel` with `env` and `headers` redacted via
+ * `redactRecord`. `api_key_env` (the env-var NAME, not its value) is preserved
+ * as-is because the name is non-secret and useful for debugging.
+ */
+export function redactChannel(channel) {
+    return redactRecord(channel);
+}
+//# sourceMappingURL=redact.js.map

package/dist/core/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/core/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM;IACN,eAAe;IACf,QAAQ;IACR,MAAM;IACN,aAAa;IACb,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,KAAK;IACL,WAAW;IACX,OAAO;CACR,CAAC,CAAA;AACF,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;AACzD,MAAM,WAAW,GAAG,wDAAwD,CAAA;AAC5E,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;AAEnF,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,UAA2C,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IAClD,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,EAAE,CAAA;IAC1C,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IACjG,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IAC5E,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACjE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,OAAwC;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC3D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAgC,EAAE,OAAO,CAAC,CAAA;IACtG,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,KAA0C,EAC1C,UAA2C,EAAE;IAE7C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5G,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;IACjG,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,CAAA;IAChD,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,IAAI,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,GAAG,OAAO,GAAG,GAAG,GAAG,SAAS,YAAY,CAAA;IACjD,CAAC;IACD,OAAO,GAAG,OAAO,GAAG,GAAG,GAAG,SAAS,GAAG,KAAK,EAAE,CAAA;AAC/C,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa;IACjD,MAAM,gBAAgB,GAAG,yCAAyC,CAAA;IAClE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrD,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;YAAE,OAAO,IAAI,CAAA;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CACjB,KAAgB,EAChB,UAA2C,EAAE,iBAAiB,EAAE,KAAK,EAAE;IAEvE,MAAM,GAAG,GAAc,EAAE,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACtB,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ;YAChC,WAAW,CAAC,KAAK,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAChD,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;YAC7B,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAA;YACrC,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACpB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACrC,SAAQ;YACV,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACnG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;YAC7D,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;YACtC,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,KAAgC,CAAA;YACjD,MAAM,WAAW,GACf,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/F,CAAC,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;YAC/F,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAgC,EAAE,OAAO,CAAC,CAAA;YACxE,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAAE,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;YACpE,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;gBAAE,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAA;YACjE,IAAI,WAAW,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;gBACvC,QAAQ,CAAC,KAAK,GAAG,YAAY,CAAA;YAC/B,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgC;IAC5D,OAAO,YAAY,CAAC,OAAO,CAAC,CAAA;AAC9B,CAAC"}

package/dist/core/results-pipeline.d.ts

@@ -1,13 +1,19 @@
-import type { JobMetadata, OutputFormat, ReconciledResults } from '../types.js';
+import type { JobMetadata, Severity, OutputFormat, ReconciledResults, ReconciledFinding } from '../types.js';
 import type { JobStore } from './job-store.js';
+import type { AckStore } from './ack-store.js';
 export interface PipelineResult {
     results: ReconciledResults;
     formatted: string;
     exitCode: number;
 }
+export interface PipelineOptions {
+    ackStore?: AckStore;
+}
+export declare function isBlockingFinding(finding: ReconciledFinding, threshold: Severity): boolean;
+export declare function isAdvisoryFinding(finding: ReconciledFinding, threshold: Severity): boolean;
 /**
  * Run the full results pipeline: parse channel outputs, reconcile findings,
  * derive verdict, format output.
  */
-export declare function runResultsPipeline(store: JobStore, job: JobMetadata, outputFormat: OutputFormat, includeRaw?: boolean): PipelineResult;
+export declare function runResultsPipeline(store: JobStore, job: JobMetadata, outputFormat: OutputFormat, includeRaw?: boolean, opts?: PipelineOptions): PipelineResult;
 //# sourceMappingURL=results-pipeline.d.ts.map

package/dist/core/results-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"results-pipeline.d.ts","sourceRoot":"","sources":["../../src/core/results-pipeline.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,WAAW,EAEX,YAAY,EAEZ,iBAAiB,EAGlB,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAE9C,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,iBAAiB,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAkCD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,QAAQ,EACf,GAAG,EAAE,WAAW,EAChB,YAAY,EAAE,YAAY,EAC1B,UAAU,UAAQ,GACjB,cAAc,CAwIhB"}
+{"version":3,"file":"results-pipeline.d.ts","sourceRoot":"","sources":["../../src/core/results-pipeline.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EACR,YAAY,EAEZ,iBAAiB,EACjB,iBAAiB,EAGlB,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,iBAAiB,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,QAAQ,CAAA;CACpB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,QAAQ,GAAG,OAAO,CAG1F;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,QAAQ,GAAG,OAAO,CAG1F;AAkCD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,QAAQ,EACf,GAAG,EAAE,WAAW,EAChB,YAAY,EAAE,YAAY,EAC1B,UAAU,UAAQ,EAClB,IAAI,GAAE,eAAoB,GACzB,cAAc,CAsKhB"}

package/dist/core/results-pipeline.js

@@ -4,6 +4,15 @@ import { formatJson } from '../formatters/json.js';
 import { formatText } from '../formatters/text.js';
 import { formatMarkdown } from '../formatters/markdown.js';
 import { SEVERITY_ORDER } from '../types.js';
+import { normalizeLocationForKey } from './stable-id.js';
+export function isBlockingFinding(finding, threshold) {
+    return finding.acknowledged !== true &&
+        SEVERITY_ORDER[finding.severity] <= SEVERITY_ORDER[threshold];
+}
+export function isAdvisoryFinding(finding, threshold) {
+    return finding.acknowledged === true ||
+        SEVERITY_ORDER[finding.severity] > SEVERITY_ORDER[threshold];
+}
 /** Maximum chars of channel-log detail to embed in the per-channel error
  *  field. Keeps JSON output readable while preserving the head of any
  *  stderr / spawn-error message captured by the dispatcher. */
@@ -36,7 +45,7 @@ function appendLogDetail(baseMsg, store, jobId, channel) {
  * Run the full results pipeline: parse channel outputs, reconcile findings,
  * derive verdict, format output.
  */
-export function runResultsPipeline(store, job, outputFormat, includeRaw = false) {
+export function runResultsPipeline(store, job, outputFormat, includeRaw = false, opts = {}) {
     const channelFindings = {};
     const perChannel = {};
     const startTimes = [];
@@ -99,6 +108,36 @@ export function runResultsPipeline(store, job, outputFormat, includeRaw = false)
         };
     }
     const reconciledFindings = reconcile(channelFindings);
+    // Apply ack lookup (T2-D): stamp acknowledged/ack_match/ack_reason on matched
+    // findings, preserving agreement/confidence/sources. isBlockingFinding and
+    // isAdvisoryFinding already treat acknowledged findings as advisory-only, so
+    // the gate (evaluateGate) skips them when computing the verdict.
+    if (opts.ackStore) {
+        try {
+            for (const f of reconciledFindings) {
+                // Only finding_key is required: AckStore.lookup's exact path is
+                // key-only; the fuzzy fallback early-returns on an empty shingle.
+                if (f.finding_key === undefined)
+                    continue;
+                const match = opts.ackStore.lookup({
+                    finding_key: f.finding_key,
+                    normalized_location: normalizeLocationForKey(f.location),
+                    shingle: f.description_shingle ?? [],
+                });
+                if (match) {
+                    f.acknowledged = true;
+                    f.ack_match = match.match;
+                    if (match.record.reason !== undefined)
+                        f.ack_reason = match.record.reason;
+                }
+            }
+        }
+        catch {
+            // Fail safe: if the ack store can't be read (e.g. a poisoned or
+            // symlinked .mmr/acks tree makes lookup throw), apply no suppression.
+            // Findings stay blocking, which is the safe direction for a gate.
+        }
+    }
     const fixThreshold = job.fix_threshold;
     const completedChannels = Object.values(job.channels)
         .filter((ch) => ch.status === 'completed').length;
@@ -116,10 +155,10 @@ export function runResultsPipeline(store, job, outputFormat, includeRaw = false)
         : verdict === 'needs-user-decision'
             ? 'No channels completed — manual review needed'
             : (() => {
-                const blockingCount = reconciledFindings.filter((f) => SEVERITY_ORDER[f.severity] <= SEVERITY_ORDER[fixThreshold]).length;
+                const blockingCount = reconciledFindings.filter((f) => isBlockingFinding(f, fixThreshold)).length;
                 return `Review blocked — ${blockingCount} finding(s) at or above ${fixThreshold}`;
             })();
-    const advisoryCount = reconciledFindings.filter((f) => SEVERITY_ORDER[f.severity] > SEVERITY_ORDER[fixThreshold]).length;
+    const advisoryCount = reconciledFindings.filter((f) => isAdvisoryFinding(f, fixThreshold)).length;
     const results = {
         job_id: job.job_id,
         verdict,
@@ -137,6 +176,14 @@ export function runResultsPipeline(store, job, outputFormat, includeRaw = false)
             total_elapsed: totalElapsed,
         },
     };
+    // Re-surface trust context persisted on the job at review time (§5 decision
+    // 1), so review --sync, `mmr results`, and `mmr reconcile` all carry it.
+    if (job.trust_mode !== undefined)
+        results.trust_mode = job.trust_mode;
+    if (job.proposed_acks !== undefined)
+        results.proposed_acks = job.proposed_acks;
+    if (job.proposed_config_change !== undefined)
+        results.proposed_config_change = job.proposed_config_change;
     let formatted;
     switch (outputFormat) {
         case 'text':

package/dist/core/results-pipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"results-pipeline.js","sourceRoot":"","sources":["../../src/core/results-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAU1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAS5C;;+DAE+D;AAC/D,MAAM,sBAAsB,GAAG,KAAK,CAAA;AAEpC;;;;;GAKG;AACH,SAAS,eAAe,CACtB,OAAe,EACf,KAAe,EACf,KAAa,EACb,OAAe;IAEf,IAAI,GAAG,GAAkB,IAAI,CAAA;IAC7B,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAA;IACxB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,sBAAsB;QACpD,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,GAAG;QAChD,CAAC,CAAC,OAAO,CAAA;IACX,OAAO,GAAG,OAAO,KAAK,MAAM,EAAE,CAAA;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAe,EACf,GAAgB,EAChB,YAA0B,EAC1B,UAAU,GAAG,KAAK;IAElB,MAAM,eAAe,GAA8B,EAAE,CAAA;IACrD,MAAM,UAAU,GAAkC,EAAE,CAAA;IACpD,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB;gBAC1D,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB;oBAChD,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB;wBACpD,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,uBAAuB;4BAC1D,CAAC,CAAC,SAAS,CAAA;YACnB,iEAAiE;YACjE,gEAAgE;YAChE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS;gBACpC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;gBACnD,CAAC,CAAC,SAAS,CAAA;YACb,UAAU,CAAC,IAAI,CAAC,GAAG;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,QAAQ;aAChB,CAAA;YACD,SAAQ;QACV,CAAC;QAED,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,IAAI,QAAQ,GAAc,EAAE,CAAA;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACxD,iEAAiE;YACjE,kDAAkD;YAClD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBAClC,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,GAAG,MAAM,CAAA;YACd,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,SAAS,CAAA;YACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;YAClD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;QAED,eAAe,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAA;QAEhC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,YAAY;YACpD,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;YAC3G,CAAC,CAAC,IAAI,CAAA;QAER,IAAI,KAAK,CAAC,UAAU;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QAC3E,IAAI,KAAK,CAAC,YAAY;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QAE7E,UAAU,CAAC,IAAI,CAAC,GAAG;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,QAAQ;YACR,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YACxC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAA;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,SAAS,CAAC,eAAe,CAAC,CAAA;IAErD,MAAM,YAAY,GAAG,GAAG,CAAC,aAAyB,CAAA;IAClD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;SAClD,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,UAAU,GAAG,iBAAiB,GAAG,CAAC;QACtC,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,YAAY,CAAC;QAChD,CAAC,CAAC,KAAK,CAAA;IAET,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAC7B,CAAA;IAClC,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IAE1D,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;QAC7E,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,QAAQ,GAAG,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,eAAe,CAAA;IAClE,MAAM,OAAO,GAAG,QAAQ;QACtB,CAAC,CAAC,gBAAgB,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,EAAE;QAChG,CAAC,CAAC,OAAO,KAAK,qBAAqB;YACjC,CAAC,CAAC,8CAA8C;YAChD,CAAC,CAAC,CAAC,GAAG,EAAE;gBACN,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,YAAY,CAAC,CAClE,CAAC,MAAM,CAAA;gBACR,OAAO,oBAAoB,aAAa,2BAA2B,YAAY,EAAE,CAAA;YACnF,CAAC,CAAC,EAAE,CAAA;IAER,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CACjE,CAAC,MAAM,CAAA;IAER,MAAM,OAAO,GAAsB;QACjC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO;QACP,aAAa,EAAE,YAAY;QAC3B,cAAc,EAAE,aAAa;QAC7B,QAAQ;QACR,OAAO;QACP,mBAAmB,EAAE,kBAAkB;QACvC,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE;YACR,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM;YACrD,kBAAkB,EAAE,iBAAiB;YACrC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;iBAC1C,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACnE,aAAa,EAAE,YAAY;SAC5B;KACF,CAAA;IAED,IAAI,SAAiB,CAAA;IACrB,QAAQ,YAAY,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAC/B,MAAK;QACP,KAAK,UAAU;YACb,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;YACnC,MAAK;QACP,KAAK,MAAM,CAAC;QACZ;YACE,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAC/B,MAAK;IACP,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC,CAAA;IAEP,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AACzC,CAAC"}
+{"version":3,"file":"results-pipeline.js","sourceRoot":"","sources":["../../src/core/results-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAW1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAG5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AAYxD,MAAM,UAAU,iBAAiB,CAAC,OAA0B,EAAE,SAAmB;IAC/E,OAAO,OAAO,CAAC,YAAY,KAAK,IAAI;QAClC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,SAAS,CAAC,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA0B,EAAE,SAAmB;IAC/E,OAAO,OAAO,CAAC,YAAY,KAAK,IAAI;QAClC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;AAChE,CAAC;AAED;;+DAE+D;AAC/D,MAAM,sBAAsB,GAAG,KAAK,CAAA;AAEpC;;;;;GAKG;AACH,SAAS,eAAe,CACtB,OAAe,EACf,KAAe,EACf,KAAa,EACb,OAAe;IAEf,IAAI,GAAG,GAAkB,IAAI,CAAA;IAC7B,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAA;IACxB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,sBAAsB;QACpD,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,GAAG;QAChD,CAAC,CAAC,OAAO,CAAA;IACX,OAAO,GAAG,OAAO,KAAK,MAAM,EAAE,CAAA;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAe,EACf,GAAgB,EAChB,YAA0B,EAC1B,UAAU,GAAG,KAAK,EAClB,OAAwB,EAAE;IAE1B,MAAM,eAAe,GAA8B,EAAE,CAAA;IACrD,MAAM,UAAU,GAAkC,EAAE,CAAA;IACpD,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB;gBAC1D,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB;oBAChD,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB;wBACpD,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,uBAAuB;4BAC1D,CAAC,CAAC,SAAS,CAAA;YACnB,iEAAiE;YACjE,gEAAgE;YAChE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS;gBACpC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;gBACnD,CAAC,CAAC,SAAS,CAAA;YACb,UAAU,CAAC,IAAI,CAAC,GAAG;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,QAAQ;aAChB,CAAA;YACD,SAAQ;QACV,CAAC;QAED,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,IAAI,QAAQ,GAAc,EAAE,CAAA;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACxD,iEAAiE;YACjE,kDAAkD;YAClD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBAClC,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,GAAG,MAAM,CAAA;YACd,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,SAAS,CAAA;YACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;YAClD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;QAED,eAAe,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAA;QAEhC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,YAAY;YACpD,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;YAC3G,CAAC,CAAC,IAAI,CAAA;QAER,IAAI,KAAK,CAAC,UAAU;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QAC3E,IAAI,KAAK,CAAC,YAAY;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QAE7E,UAAU,CAAC,IAAI,CAAC,GAAG;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,QAAQ;YACR,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YACxC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAA;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,SAAS,CAAC,eAAe,CAAC,CAAA;IAErD,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,iEAAiE;IACjE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;gBACnC,gEAAgE;gBAChE,kEAAkE;gBAClE,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;oBAAE,SAAQ;gBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACjC,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,mBAAmB,EAAE,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACxD,OAAO,EAAE,CAAC,CAAC,mBAAmB,IAAI,EAAE;iBACrC,CAAC,CAAA;gBACF,IAAI,KAAK,EAAE,CAAC;oBACV,CAAC,CAAC,YAAY,GAAG,IAAI,CAAA;oBACrB,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAA;oBACzB,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;wBAAE,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAA;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;YAChE,sEAAsE;YACtE,kEAAkE;QACpE,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,aAAyB,CAAA;IAClD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;SAClD,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,UAAU,GAAG,iBAAiB,GAAG,CAAC;QACtC,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,YAAY,CAAC;QAChD,CAAC,CAAC,KAAK,CAAA;IAET,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAC7B,CAAA;IAClC,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IAE1D,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;QAC7E,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,QAAQ,GAAG,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,eAAe,CAAA;IAClE,MAAM,OAAO,GAAG,QAAQ;QACtB,CAAC,CAAC,gBAAgB,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,EAAE;QAChG,CAAC,CAAC,OAAO,KAAK,qBAAqB;YACjC,CAAC,CAAC,8CAA8C;YAChD,CAAC,CAAC,CAAC,GAAG,EAAE;gBACN,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAA;gBACjG,OAAO,oBAAoB,aAAa,2BAA2B,YAAY,EAAE,CAAA;YACnF,CAAC,CAAC,EAAE,CAAA;IAER,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAA;IAEjG,MAAM,OAAO,GAAsB;QACjC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO;QACP,aAAa,EAAE,YAAY;QAC3B,cAAc,EAAE,aAAa;QAC7B,QAAQ;QACR,OAAO;QACP,mBAAmB,EAAE,kBAAkB;QACvC,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE;YACR,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM;YACrD,kBAAkB,EAAE,iBAAiB;YACrC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;iBAC1C,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACnE,aAAa,EAAE,YAAY;SAC5B;KACF,CAAA;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAA;IACrE,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAA;IAC9E,IAAI,GAAG,CAAC,sBAAsB,KAAK,SAAS;QAAE,OAAO,CAAC,sBAAsB,GAAG,GAAG,CAAC,sBAAsB,CAAA;IAEzG,IAAI,SAAiB,CAAA;IACrB,QAAQ,YAAY,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAC/B,MAAK;QACP,KAAK,UAAU;YACb,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;YACnC,MAAK;QACP,KAAK,MAAM,CAAC;QACZ;YACE,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAC/B,MAAK;IACP,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC,CAAA;IAEP,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AACzC,CAAC"}

package/dist/core/runtime-probe.d.ts

@@ -0,0 +1,14 @@
+export interface ProbeResult {
+    detected: boolean;
+    reason?: string;
+}
+/**
+ * Probe for a local runtime by running `<command> <args>` with the given
+ * timeout (ms). Returns detected=true if the process exits 0 within the
+ * timeout.
+ *
+ * The command name is validated against a strict character set before
+ * spawn to prevent shell injection from a hardcoded probe list.
+ */
+export declare function probeRuntime(command: string, args: string[], timeoutMs: number): Promise<ProbeResult>;
+//# sourceMappingURL=runtime-probe.d.ts.map

package/dist/core/runtime-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-probe.d.ts","sourceRoot":"","sources":["../../src/core/runtime-probe.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAID;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC,CA+CtB"}

package/dist/core/runtime-probe.js

@@ -0,0 +1,57 @@
+import { spawn } from 'node:child_process';
+const MAX_TIMEOUT_MS = 2_147_483_647;
+/**
+ * Probe for a local runtime by running `<command> <args>` with the given
+ * timeout (ms). Returns detected=true if the process exits 0 within the
+ * timeout.
+ *
+ * The command name is validated against a strict character set before
+ * spawn to prevent shell injection from a hardcoded probe list.
+ */
+export async function probeRuntime(command, args, timeoutMs) {
+    if (!/^[a-zA-Z0-9._/\\: ()@+~-]+$/.test(command)) {
+        return { detected: false, reason: 'invalid command name' };
+    }
+    if (!Number.isInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > MAX_TIMEOUT_MS) {
+        return { detected: false, reason: 'invalid timeout' };
+    }
+    for (const arg of args) {
+        if (arg.includes('\0')) {
+            return { detected: false, reason: 'invalid argument' };
+        }
+    }
+    return new Promise((resolve) => {
+        let settled = false;
+        let timedOut = false;
+        let killTimer;
+        const child = spawn(command, args, { stdio: 'ignore' });
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGTERM');
+            killTimer = setTimeout(() => {
+                child.kill('SIGKILL');
+            }, 250);
+        }, timeoutMs);
+        function finish(result) {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (killTimer)
+                clearTimeout(killTimer);
+            resolve(result);
+        }
+        child.on('close', (code, signal) => {
+            if (timedOut) {
+                finish({ detected: false, reason: 'timeout' });
+                return;
+            }
+            const reason = code === 0 ? undefined : signal ? `signal ${signal}` : `exit ${code}`;
+            finish({ detected: code === 0, reason });
+        });
+        child.on('error', (err) => {
+            finish({ detected: false, reason: err.message });
+        });
+    });
+}
+//# sourceMappingURL=runtime-probe.js.map

package/dist/core/runtime-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-probe.js","sourceRoot":"","sources":["../../src/core/runtime-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAO1C,MAAM,cAAc,GAAG,aAAa,CAAA;AAEpC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,IAAc,EACd,SAAiB;IAEjB,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;QAChF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IACvD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAA;QACxD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;QAC1C,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,SAAoD,CAAA;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACrB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACvB,CAAC,EAAE,GAAG,CAAC,CAAA;QACT,CAAC,EAAE,SAAS,CAAC,CAAA;QAEb,SAAS,MAAM,CAAC,MAAmB;YACjC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAA;YACtC,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;gBAC9C,OAAM;YACR,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAA;YACpF,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAClD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/core/stable-id.d.ts

@@ -0,0 +1,19 @@
+import type { Finding } from '../types.js';
+export declare function normalizeLocationForKey(location: string): string;
+export declare function normalizeDescriptionForKey(description: string): string;
+export declare function normalizeSuggestionForKey(suggestion: string): string;
+/**
+ * Compute the stable identity key per §5 decision 2:
+ *   finding_key = sha1(
+ *     normalized_location + "|" + (category ?? "") + "|" +
+ *     sha1(description_normalized) + "|" + sha1(suggestion_normalized)
+ *   )
+ *
+ * Severity is intentionally excluded — the same underlying issue surfacing at
+ * P1 vs P2 across channels should still reconcile to one key.
+ */
+export declare function computeFindingKey(finding: Finding): string;
+export declare function descriptionShingle(description: string): string[];
+export declare function jaccardSimilarity(a: readonly string[] | ReadonlySet<string>, b: readonly string[] | ReadonlySet<string>): number;
+export declare function shingleSize(shingle: readonly string[] | ReadonlySet<string>): number;
+//# sourceMappingURL=stable-id.d.ts.map

package/dist/core/stable-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stable-id.d.ts","sourceRoot":"","sources":["../../src/core/stable-id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAY1C,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhE;AAwCD,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtE;AAQD,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIpE;AAmCD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAM1D;AAMD,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAUhE;AAED,wBAAgB,iBAAiB,CAC/B,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,EAC1C,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,GACzC,MAAM,CAWR;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAEpF"}