@zivis/mcp 0.1.0-alpha.21 → 0.1.0-alpha.23

package/dist/matcher/ast-eval.d.ts

@@ -0,0 +1,27 @@
+/**
+ * AST strategy evaluator.
+ *
+ * Wraps @ast-grep/napi. Capsule strategies of code:AST carry a YAML rule
+ * body in `expression` (already parsed by js-yaml when the capsule was
+ * loaded). We run that rule against source files of the strategy's
+ * language and collect line spans as evidence.
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md (Phase 3 — Matching engine)
+ */
+export type AstLanguage = "typescript" | "javascript" | "python" | "go";
+export interface AstMatch {
+    file: string;
+    start_line: number;
+    end_line: number;
+    matched_text: string;
+}
+/**
+ * Run an ast-grep rule (already parsed from the capsule YAML) against the
+ * given source files and return all matches.
+ *
+ * The expression is the capsule's `strategy.expression` field. Capsules
+ * may write the rule as either:
+ *   - a raw string (parsed as YAML) containing a top-level `rule:` block, or
+ *   - a structured object (already an `{ rule: { ... } }` shape)
+ */
+export declare function evaluateAstStrategy(expression: unknown, language: AstLanguage, files: string[], rootDir: string): Promise<AstMatch[]>;

package/dist/matcher/ast-eval.js

@@ -0,0 +1,132 @@
+/**
+ * AST strategy evaluator.
+ *
+ * Wraps @ast-grep/napi. Capsule strategies of code:AST carry a YAML rule
+ * body in `expression` (already parsed by js-yaml when the capsule was
+ * loaded). We run that rule against source files of the strategy's
+ * language and collect line spans as evidence.
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md (Phase 3 — Matching engine)
+ */
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import * as yaml from "js-yaml";
+import * as napi from "@ast-grep/napi";
+let registered = false;
+async function ensureLanguagesRegistered() {
+    if (registered)
+        return;
+    // ts/js are built into napi; python and go come from dynamic language packs.
+    const py = (await import("@ast-grep/lang-python")).default;
+    const go = (await import("@ast-grep/lang-go")).default;
+    napi.registerDynamicLanguage({ python: py, go: go });
+    registered = true;
+}
+/**
+ * Run an ast-grep rule (already parsed from the capsule YAML) against the
+ * given source files and return all matches.
+ *
+ * The expression is the capsule's `strategy.expression` field. Capsules
+ * may write the rule as either:
+ *   - a raw string (parsed as YAML) containing a top-level `rule:` block, or
+ *   - a structured object (already an `{ rule: { ... } }` shape)
+ */
+export async function evaluateAstStrategy(expression, language, files, rootDir) {
+    await ensureLanguagesRegistered();
+    const rule = normalizeExpressionToRule(expression);
+    if (!rule)
+        return [];
+    const matches = [];
+    const langKey = languageKey(language);
+    for (const file of files) {
+        let raw;
+        try {
+            raw = await fs.readFile(file, "utf8");
+        }
+        catch {
+            continue;
+        }
+        if (!raw)
+            continue;
+        let root;
+        try {
+            root = napi.parse(langKey, raw);
+        }
+        catch {
+            continue;
+        }
+        let foundNodes;
+        try {
+            // Cast: napi types restrict findAll to string|number, but at runtime it
+            // accepts a NapiConfig object (which is what capsule rules deserialize to).
+            foundNodes = root.root().findAll(rule);
+        }
+        catch {
+            // ast-grep throws on malformed rules; skip this strategy on this file.
+            continue;
+        }
+        for (const node of foundNodes) {
+            const range = node.range();
+            matches.push({
+                file: relPosix(rootDir, file),
+                start_line: (range.start.line ?? 0) + 1,
+                end_line: (range.end.line ?? 0) + 1,
+                matched_text: truncate(node.text(), 240),
+            });
+        }
+    }
+    return matches;
+}
+// ── Helpers ──
+function normalizeExpressionToRule(expression) {
+    if (typeof expression === "string") {
+        try {
+            return ensureRuleWrapper(yaml.load(expression));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    if (expression && typeof expression === "object") {
+        return ensureRuleWrapper(expression);
+    }
+    return undefined;
+}
+/**
+ * ast-grep's findAll requires a top-level `rule:` wrapper. Capsule AST
+ * strategies have it explicit in YAML; control detection rules carry just
+ * the bare rule body. Wrap consistently here so both shapes evaluate.
+ *
+ * NapiConfig keys recognized as outer-level: rule, constraints, utils,
+ * filters, language, transform, fix. Any of those at the top means we're
+ * already wrapped.
+ */
+function ensureRuleWrapper(parsed) {
+    if (!parsed || typeof parsed !== "object")
+        return parsed;
+    const obj = parsed;
+    if ("rule" in obj)
+        return obj;
+    return { rule: obj };
+}
+function languageKey(lang) {
+    // ts and tsx are separate engines in napi; we use ts for .ts/.tsx and
+    // js for .js/.jsx/.mjs/.cjs. The matcher passes the file's language tag,
+    // not the file extension — so .tsx files routed as 'typescript' work.
+    switch (lang) {
+        case "typescript": return "ts";
+        case "javascript": return "js";
+        case "python": return "python";
+        case "go": return "go";
+    }
+}
+function relPosix(rootDir, abs) {
+    const rel = path.relative(rootDir, abs);
+    return rel.split(path.sep).join("/");
+}
+function truncate(s, max) {
+    if (s.length <= max)
+        return s;
+    return s.slice(0, max) + "…";
+}
+//# sourceMappingURL=ast-eval.js.map

package/dist/matcher/ast-eval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast-eval.js","sourceRoot":"","sources":["../../src/matcher/ast-eval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AAEvC,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,KAAK,UAAU,yBAAyB;IACtC,IAAI,UAAU;QAAE,OAAO;IACvB,6EAA6E;IAC7E,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3D,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC;IACvD,IAAI,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACrD,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAmB,EACnB,QAAqB,EACrB,KAAe,EACf,OAAe;IAEf,MAAM,yBAAyB,EAAE,CAAC;IAElC,MAAM,IAAI,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC;QACf,IAAI,CAAC;YACH,wEAAwE;YACxE,4EAA4E;YAC5E,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAyB,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC7B,UAAU,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC;gBACvC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC;gBACnC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gBAAgB;AAEhB,SAAS,yBAAyB,CAAC,UAAmB;IACpD,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACzD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAC9B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,IAAiB;IACpC,sEAAsE;IACtE,yEAAyE;IACzE,sEAAsE;IACtE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC;QAC/B,KAAK,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC;QAC/B,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,GAAW;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;AAC/B,CAAC"}

package/dist/matcher/finding.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Normalized Finding type emitted by the matcher.
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md
+ *   "Normalize outputs to a single finding schema (patternId/version,
+ *    matched graph evidence, confidence, lane, explanation, remediation)."
+ *
+ * Lane determination:
+ *   - trusted: count(fired deterministic strategies) >= required_evidence_count
+ *   - inferred: any strategy fired but bar not met (host LLM should confirm)
+ *   - (no finding emitted otherwise)
+ */
+export type Lane = "trusted" | "inferred";
+export interface MatchedEvidence {
+    /** Where the strategy fired. */
+    file: string;
+    start_line: number;
+    end_line?: number;
+    /** Truncated source snippet for human review (NOT for re-execution). */
+    matched_text?: string;
+    /** Which strategy code emitted this evidence (AST, GRAPH, META, INFER, ...). */
+    strategy_code: string;
+}
+export interface FiredStrategy {
+    code: string;
+    language?: string;
+    trusted: boolean;
+    confidence_weight: number;
+    match_count: number;
+}
+export interface InferenceCandidate {
+    prompt_ref: string;
+    expected_output_schema?: unknown;
+    minimum_context_required?: {
+        lines?: number;
+        symbols?: string[];
+    };
+    /** Why the host LLM should run inference on this finding. */
+    reason: string;
+}
+export interface Finding {
+    pattern_id: string;
+    pattern_version: string;
+    lane: Lane;
+    /** 0..1 — sum of fired-strategy weights, capped at 1. */
+    confidence: number;
+    /** Strategies that contributed (AST matches, INFER candidate, etc.). */
+    fired_strategies: FiredStrategy[];
+    /** Evidence spans from deterministic strategies that fired. */
+    evidence: MatchedEvidence[];
+    /** Present iff the capsule has an INFER strategy — host LLM should pick this up. */
+    inference_candidate?: InferenceCandidate;
+    /** Surfaced from the capsule for the host's framing. */
+    safe_summary?: string;
+    threats?: unknown[];
+    repair_contract?: unknown;
+}
+export interface MatcherSummary {
+    trusted_count: number;
+    inferred_count: number;
+    total: number;
+}
+export interface MatcherResult {
+    pack: {
+        id: string;
+        version: string;
+    };
+    artifact_path: string;
+    cwd: string;
+    capsules_relevant: number;
+    capsules_evaluated: number;
+    ast_files_scanned: number;
+    duration_ms: number;
+    summary: MatcherSummary;
+    findings: Finding[];
+}

package/dist/matcher/finding.js

@@ -0,0 +1,14 @@
+/**
+ * Normalized Finding type emitted by the matcher.
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md
+ *   "Normalize outputs to a single finding schema (patternId/version,
+ *    matched graph evidence, confidence, lane, explanation, remediation)."
+ *
+ * Lane determination:
+ *   - trusted: count(fired deterministic strategies) >= required_evidence_count
+ *   - inferred: any strategy fired but bar not met (host LLM should confirm)
+ *   - (no finding emitted otherwise)
+ */
+export {};
+//# sourceMappingURL=finding.js.map

package/dist/matcher/finding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding.js","sourceRoot":"","sources":["../../src/matcher/finding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/matcher/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Phase 3 matcher — runs the local public pack against a repo graph
+ * artifact + the source files in cwd.
+ *
+ * v1 scope (locked):
+ *   - AST strategies are evaluated for real (via @ast-grep/napi)
+ *   - INFER strategies emit inference candidates; host LLM runs them
+ *   - GRAPH / META / DEP / CONFIG / STRUCT / REGEX / SEM / RECON: not
+ *     evaluated yet, but visible in `fired_strategies` as `match_count: 0`
+ *     so we don't lose the contract.
+ *
+ * Lane assignment per finding:
+ *   - trusted: count of fired deterministic (trusted: true) strategies
+ *     reaches `required_evidence_count`
+ *   - inferred: any strategy fired but bar not met
+ *   - (no finding) if nothing fired
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md (Phase 3)
+ */
+import type { MatcherResult } from "./finding.js";
+export type { Finding, FiredStrategy, MatchedEvidence, MatcherResult, Lane } from "./finding.js";
+export interface RunMatcherOpts {
+    /** Path to the RepoGraphArtifactV1 JSON produced by `zivis inspect`. */
+    artifactPath: string;
+    /** Repo root for source-file walking (capsule AST strategies match against this). */
+    cwd: string;
+    /** Override default pack id. */
+    packId?: string;
+}
+export declare function runMatcher(opts: RunMatcherOpts): Promise<MatcherResult>;

package/dist/matcher/index.js

@@ -0,0 +1,255 @@
+/**
+ * Phase 3 matcher — runs the local public pack against a repo graph
+ * artifact + the source files in cwd.
+ *
+ * v1 scope (locked):
+ *   - AST strategies are evaluated for real (via @ast-grep/napi)
+ *   - INFER strategies emit inference candidates; host LLM runs them
+ *   - GRAPH / META / DEP / CONFIG / STRUCT / REGEX / SEM / RECON: not
+ *     evaluated yet, but visible in `fired_strategies` as `match_count: 0`
+ *     so we don't lose the contract.
+ *
+ * Lane assignment per finding:
+ *   - trusted: count of fired deterministic (trusted: true) strategies
+ *     reaches `required_evidence_count`
+ *   - inferred: any strategy fired but bar not met
+ *   - (no finding) if nothing fired
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md (Phase 3)
+ */
+import * as fs from "node:fs/promises";
+import * as fssync from "node:fs";
+import { loadActivePack, findRelevantCapsules, getControl, } from "../pattern-pack/index.js";
+import { walkLanguageFiles } from "./walker.js";
+import { evaluateAstStrategy } from "./ast-eval.js";
+const SUPPORTED_AST_LANGS = new Set([
+    "typescript",
+    "javascript",
+    "python",
+    "go",
+]);
+export async function runMatcher(opts) {
+    const startedAt = Date.now();
+    const handle = await loadActivePack(opts.packId);
+    // Load and parse the artifact.
+    const artifact = await readArtifact(opts.artifactPath);
+    const relevant = await findRelevantCapsules(handle, artifact);
+    // Walk source files once for the languages any relevant capsule needs.
+    const langsNeeded = collectAstLanguagesNeeded(relevant);
+    const walked = langsNeeded.length > 0
+        ? await walkLanguageFiles(opts.cwd, langsNeeded)
+        : { filesByLanguage: new Map(), filesScanned: 0, filesSkipped: 0 };
+    // Pre-compute "which controls are present in this codebase" for META eval.
+    // Controls are evaluated once per matcher run, not per capsule, since multiple
+    // capsules may reference the same control.
+    const controlPresence = await evaluateAllControls(handle, opts.cwd, walked.filesByLanguage);
+    const findings = [];
+    for (const cap of relevant) {
+        const finding = await evaluateCapsule(cap, opts.cwd, walked.filesByLanguage, controlPresence);
+        if (finding)
+            findings.push(finding);
+    }
+    const summary = {
+        trusted_count: findings.filter((f) => f.lane === "trusted").length,
+        inferred_count: findings.filter((f) => f.lane === "inferred").length,
+        total: findings.length,
+    };
+    return {
+        pack: { id: handle.manifest.pack_id, version: handle.manifest.version },
+        artifact_path: opts.artifactPath,
+        cwd: opts.cwd,
+        capsules_relevant: relevant.length,
+        capsules_evaluated: relevant.length,
+        ast_files_scanned: walked.filesScanned,
+        duration_ms: Date.now() - startedAt,
+        summary,
+        findings,
+    };
+}
+// ── Capsule evaluation ──
+async function evaluateCapsule(cap, cwd, filesByLanguage, controlPresence) {
+    const strategies = (cap.strategies ?? []);
+    const fired = [];
+    const evidence = [];
+    let inferenceCandidate;
+    for (const strategy of strategies) {
+        const code = strategy.code;
+        const trusted = strategy.trusted !== false && code !== "INFER" && code !== "SEM" && code !== "REGEX";
+        if (code === "AST") {
+            const lang = (strategy.language ?? "").toLowerCase();
+            if (!SUPPORTED_AST_LANGS.has(lang)) {
+                fired.push({ code, language: lang, trusted, confidence_weight: strategy.confidence_weight, match_count: 0 });
+                continue;
+            }
+            const files = filesByLanguage.get(lang) ?? [];
+            if (files.length === 0) {
+                fired.push({ code, language: lang, trusted, confidence_weight: strategy.confidence_weight, match_count: 0 });
+                continue;
+            }
+            const matches = await evaluateAstStrategy(strategy.expression, lang, files, cwd);
+            fired.push({
+                code,
+                language: lang,
+                trusted,
+                confidence_weight: strategy.confidence_weight,
+                match_count: matches.length,
+            });
+            for (const m of matches) {
+                evidence.push({
+                    file: m.file,
+                    start_line: m.start_line,
+                    end_line: m.end_line,
+                    matched_text: m.matched_text,
+                    strategy_code: code,
+                });
+            }
+        }
+        else if (code === "META") {
+            const result = evaluateMetaStrategy(strategy.expression, controlPresence);
+            fired.push({
+                code,
+                trusted,
+                confidence_weight: strategy.confidence_weight,
+                match_count: result.fired ? 1 : 0,
+            });
+            if (result.fired) {
+                evidence.push({
+                    file: "(synthetic)",
+                    start_line: 0,
+                    matched_text: `META: none_of_controls satisfied; absent: [${result.absent.join(", ")}]`,
+                    strategy_code: code,
+                });
+            }
+        }
+        else if (code === "INFER") {
+            // Always emit a candidate so the host LLM can run inference for this
+            // capsule. Lane stays inferred-or-better based on the trusted strategies.
+            if (cap.model_task_prompt_ref) {
+                inferenceCandidate = {
+                    prompt_ref: cap.model_task_prompt_ref,
+                    expected_output_schema: cap.expected_output_schema,
+                    minimum_context_required: cap.minimum_context_required,
+                    reason: "Capsule has an INFER strategy. Use zivis_threat_get_inference_prompt to retrieve the prompt bundle, gather the indicated code spans, and run the inference in your model.",
+                };
+            }
+            fired.push({ code, trusted: false, confidence_weight: strategy.confidence_weight, match_count: 1 });
+        }
+        else {
+            // GRAPH / DEP / CONFIG / STRUCT / SEM / REGEX / RECON not evaluated yet.
+            fired.push({ code, trusted, confidence_weight: strategy.confidence_weight, match_count: 0 });
+        }
+    }
+    // Did anything actually fire? (match_count > 0 OR INFER emitted)
+    const anyFired = fired.some((f) => f.match_count > 0);
+    if (!anyFired)
+        return undefined;
+    // Lane: trusted iff enough deterministic strategies fired.
+    const trustedFired = fired.filter((f) => f.trusted && f.match_count > 0).length;
+    const requiredCount = cap.required_evidence_count ?? 1;
+    const lane = trustedFired >= requiredCount ? "trusted" : "inferred";
+    // Confidence: sum of weights for strategies that fired (capped at 1.0).
+    const confidence = Math.min(1, fired.reduce((acc, f) => (f.match_count > 0 ? acc + f.confidence_weight : acc), 0));
+    return {
+        pattern_id: cap.id,
+        pattern_version: cap.version,
+        lane,
+        confidence,
+        fired_strategies: fired,
+        evidence,
+        inference_candidate: inferenceCandidate,
+        safe_summary: cap.safe_summary,
+        threats: cap.threats,
+        repair_contract: cap.repair_contract,
+    };
+}
+// ── Helpers ──
+async function readArtifact(p) {
+    if (!fssync.existsSync(p)) {
+        throw new Error(`Artifact not found: ${p}`);
+    }
+    const raw = await fs.readFile(p, "utf8");
+    return JSON.parse(raw);
+}
+function collectAstLanguagesNeeded(capsules) {
+    const set = new Set();
+    for (const cap of capsules) {
+        for (const strategy of cap.strategies) {
+            if (strategy.code !== "AST")
+                continue;
+            const lang = (strategy.language ?? "").toLowerCase();
+            if (SUPPORTED_AST_LANGS.has(lang))
+                set.add(lang);
+        }
+    }
+    // Controls' detection rules also need their languages walked. Add all
+    // common ones so control eval has files to scan; cheap cost since the
+    // walker already filters by extension.
+    set.add("typescript");
+    set.add("python");
+    return [...set];
+}
+/**
+ * Evaluate a META strategy expression against pre-computed control presence.
+ *
+ * v1 supports `none_of_controls` (the only shape currently in the capsules).
+ * Semantics: META fires iff at least one referenced control is checkable
+ * AND every checkable control is absent. Unchecked controls are ignored
+ * conservatively — we don't fire META unless we have *some* signal.
+ */
+function evaluateMetaStrategy(expression, presence) {
+    const expr = expression;
+    if (!expr || typeof expr !== "object")
+        return { fired: false, absent: [] };
+    if (expr.none_of_controls && expr.none_of_controls.length > 0) {
+        const checkable = expr.none_of_controls.filter((id) => presence.get(id)?.checkable);
+        if (checkable.length === 0)
+            return { fired: false, absent: [] };
+        const absent = checkable.filter((id) => !presence.get(id).present);
+        if (absent.length === checkable.length) {
+            return { fired: true, absent };
+        }
+        return { fired: false, absent };
+    }
+    // all_of_controls / any_of_controls — placeholder for future shapes.
+    // For v1 only none_of_controls is implemented; treat others as no-fire.
+    return { fired: false, absent: [] };
+}
+/**
+ * Evaluate every control in the loaded pack once against the source files.
+ * Returns a map { control_id → { present, checkable } } that META eval reads.
+ *
+ * `checkable: false` means the control's detection rules don't apply to any
+ * language present in this codebase — we have no signal either way.
+ */
+async function evaluateAllControls(handle, cwd, filesByLanguage) {
+    const out = new Map();
+    const controlEntries = handle.manifest.controls ?? [];
+    for (const entry of controlEntries) {
+        let control;
+        try {
+            control = await getControl(handle, entry.id);
+        }
+        catch {
+            continue;
+        }
+        let present = false;
+        let checkable = false;
+        for (const det of control.detection ?? []) {
+            const lang = det.language;
+            if (!SUPPORTED_AST_LANGS.has(lang))
+                continue;
+            const files = filesByLanguage.get(lang) ?? [];
+            if (files.length === 0)
+                continue;
+            checkable = true;
+            const matches = await evaluateAstStrategy(det.rule, lang, files, cwd);
+            if (matches.length > 0) {
+                present = true;
+                break;
+            }
+        }
+        out.set(control.id, { present, checkable });
+    }
+    return out;
+}
+//# sourceMappingURL=index.js.map

package/dist/matcher/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/matcher/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,UAAU,GAKX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAqB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAoB,MAAM,eAAe,CAAC;AA6BtE,MAAM,mBAAmB,GAA6B,IAAI,GAAG,CAAc;IACzE,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjD,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE9D,uEAAuE;IACvE,MAAM,WAAW,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GACV,WAAW,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,WAA6B,CAAC;QAClE,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAEvE,2EAA2E;IAC3E,+EAA+E;IAC/E,2CAA2C;IAC3C,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,eAA6C,CAAC,CAAC;IAE1H,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,eAA6C,EAAE,eAAe,CAAC,CAAC;QAC5H,IAAI,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM;QAClE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,MAAM;QACpE,KAAK,EAAE,QAAQ,CAAC,MAAM;KACvB,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;QACvE,aAAa,EAAE,IAAI,CAAC,YAAY;QAChC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,iBAAiB,EAAE,QAAQ,CAAC,MAAM;QAClC,kBAAkB,EAAE,QAAQ,CAAC,MAAM;QACnC,iBAAiB,EAAE,MAAM,CAAC,YAAY;QACtC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,2BAA2B;AAE3B,KAAK,UAAU,eAAe,CAC5B,GAAY,EACZ,GAAW,EACX,eAA2C,EAC3C,eAAmC;IAEnC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAsB,CAAC;IAC/D,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,kBAAkD,CAAC;IAEvD,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;QAErG,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAiB,CAAC;YACpE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC7G,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC7G,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACjF,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,QAAQ,EAAE,IAAI;gBACd,OAAO;gBACP,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,WAAW,EAAE,OAAO,CAAC,MAAM;aAC5B,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC5B,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,OAAO;gBACP,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,aAAa;oBACnB,UAAU,EAAE,CAAC;oBACb,YAAY,EAAE,8CAA8C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACvF,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,qEAAqE;YACrE,0EAA0E;YAC1E,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBAC9B,kBAAkB,GAAG;oBACnB,UAAU,EAAE,GAAG,CAAC,qBAAqB;oBACrC,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;oBAClD,wBAAwB,EAAE,GAAG,CAAC,wBAAwB;oBACtD,MAAM,EACJ,2KAA2K;iBAC9K,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,2DAA2D;IAC3D,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAChF,MAAM,aAAa,GAAI,GAAuD,CAAC,uBAAuB,IAAI,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAS,YAAY,IAAI,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAE1E,wEAAwE;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CACnF,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,EAAE;QAClB,eAAe,EAAE,GAAG,CAAC,OAAO;QAC5B,IAAI;QACJ,UAAU;QACV,gBAAgB,EAAE,KAAK;QACvB,QAAQ;QACR,mBAAmB,EAAE,kBAAkB;QACvC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,eAAe,EAAE,GAAG,CAAC,eAAe;KACrC,CAAC;AACJ,CAAC;AAED,gBAAgB;AAEhB,KAAK,UAAU,YAAY,CAAC,CAAS;IACnC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;AAC9C,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAmB;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAe,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,UAA+B,EAAE,CAAC;YAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK;gBAAE,SAAS;YACtC,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAiB,CAAC;YACpE,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,sEAAsE;IACtE,uCAAuC;IACvC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClB,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAiBD;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,UAAmB,EACnB,QAA4B;IAE5B,MAAM,IAAI,GAAG,UAAwC,CAAC;IACtD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE3E,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACpF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,qEAAqE;IACrE,wEAAwE;IACxE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAChC,MAAkB,EAClB,GAAW,EACX,eAA2C;IAE3C,MAAM,GAAG,GAAuB,IAAI,GAAG,EAAE,CAAC;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAuB,CAAC;YACzC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7C,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjC,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/matcher/inference-candidates.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Aggregate inference candidates from matcher findings into a top-level
+ * bundle the host LLM can't ignore.
+ *
+ * The matcher already attaches `inference_candidate` to each finding (when
+ * the capsule has an INFER strategy with model_task_prompt_ref), but if
+ * the host LLM only reads the headline it'll never call
+ * `zivis_threat_get_inference_prompt` and the inference never happens.
+ *
+ * This module promotes inference candidates to a structured top-level
+ * `inference_candidates[]` block with the prompt text bundled inline,
+ * plus a `host_required_action` directive. The host LLM gets everything
+ * it needs to run inference in one tool result — no extra calls.
+ *
+ * This is "Option A" from the local-inference triage. Modes B (local LLM
+ * sidecar) and C (ZIVIS-hosted cloud inference) are roadmap items.
+ */
+import { type Capsule } from "../pattern-pack/index.js";
+import type { Finding } from "./finding.js";
+export interface BundledInferenceCandidate {
+    candidate_id: string;
+    capsule_id: string;
+    capsule_version: string;
+    pattern_title?: string;
+    /** Full inference prompt text — already inlined; do not call getInferencePrompt again. */
+    prompt: string;
+    /** JSON Schema the host LLM's structured output must validate against. */
+    expected_output_schema: unknown;
+    /** Code spans the host LLM should attach to the prompt context. */
+    evidence_focus: Array<{
+        file: string;
+        start_line: number;
+        end_line?: number;
+        note?: string;
+    }>;
+    /** Per-capsule guidance on how much surrounding context the host should grab. */
+    minimum_context_required?: {
+        lines?: number;
+        symbols?: string[];
+    };
+    /** Plain-English instructions for the host LLM, repeated per candidate. */
+    instructions_for_host: string;
+}
+export interface InferenceBundle {
+    inference_candidates: BundledInferenceCandidate[];
+    host_required_action: string;
+}
+/**
+ * Build the inline inference bundle for a list of findings. Loads the pack
+ * once, fetches each capsule's inference prompt, and packages it with the
+ * deterministic-strategy evidence so the host can run inference without
+ * any further MCP round-trip.
+ */
+export declare function buildInferenceBundle(findings: Finding[], capsuleByPatternId?: Map<string, Capsule>): Promise<InferenceBundle>;