@ztothez/design-engineering 2.0.0

package/dist/src/portfolio/taxonomy-schema.d.ts

@@ -0,0 +1,215 @@
+import { z } from "zod";
+export declare const evaluationDimensionSchema: z.ZodEnum<{
+    accessibility: "accessibility";
+    "information-design": "information-design";
+    architecture: "architecture";
+    "product-task": "product-task";
+    "interface-trust": "interface-trust";
+    "visual-polish": "visual-polish";
+    responsive: "responsive";
+    "runtime-reliability": "runtime-reliability";
+    "audit-precision": "audit-precision";
+}>;
+export type EvaluationDimension = z.infer<typeof evaluationDimensionSchema>;
+export declare const dimensionMetricsSchema: z.ZodObject<{
+    eligible: z.ZodNumber;
+    passed: z.ZodNumber;
+    findings: z.ZodNumber;
+    limitations: z.ZodNumber;
+    abstentions: z.ZodNumber;
+}, z.core.$strip>;
+export type DimensionMetrics = z.infer<typeof dimensionMetricsSchema>;
+export declare const recurrenceItemSchema: z.ZodObject<{
+    ruleId: z.ZodString;
+    category: z.ZodString;
+    dimension: z.ZodEnum<{
+        accessibility: "accessibility";
+        "information-design": "information-design";
+        architecture: "architecture";
+        "product-task": "product-task";
+        "interface-trust": "interface-trust";
+        "visual-polish": "visual-polish";
+        responsive: "responsive";
+        "runtime-reliability": "runtime-reliability";
+        "audit-precision": "audit-precision";
+    }>;
+    affectedProjects: z.ZodArray<z.ZodString>;
+    affectedDomains: z.ZodArray<z.ZodString>;
+    totalOccurrences: z.ZodNumber;
+    sampleMessages: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type RecurrenceItem = z.infer<typeof recurrenceItemSchema>;
+export declare const maintainerAnnotationSchema: z.ZodObject<{
+    findingId: z.ZodOptional<z.ZodString>;
+    ruleId: z.ZodString;
+    projectId: z.ZodString;
+    type: z.ZodEnum<{
+        "false-positive": "false-positive";
+        "false-negative": "false-negative";
+    }>;
+    rationale: z.ZodString;
+    reviewedBy: z.ZodString;
+    reviewedAt: z.ZodString;
+}, z.core.$strip>;
+export type MaintainerAnnotation = z.infer<typeof maintainerAnnotationSchema>;
+export declare const projectDimensionSummarySchema: z.ZodObject<{
+    projectId: z.ZodString;
+    domain: z.ZodString;
+    archetype: z.ZodString;
+    framework: z.ZodString;
+    dimensions: z.ZodRecord<z.ZodEnum<{
+        accessibility: "accessibility";
+        "information-design": "information-design";
+        architecture: "architecture";
+        "product-task": "product-task";
+        "interface-trust": "interface-trust";
+        "visual-polish": "visual-polish";
+        responsive: "responsive";
+        "runtime-reliability": "runtime-reliability";
+        "audit-precision": "audit-precision";
+    }>, z.ZodObject<{
+        eligible: z.ZodNumber;
+        passed: z.ZodNumber;
+        findings: z.ZodNumber;
+        limitations: z.ZodNumber;
+        abstentions: z.ZodNumber;
+    }, z.core.$strip>>;
+    totals: z.ZodObject<{
+        eligible: z.ZodNumber;
+        passed: z.ZodNumber;
+        findings: z.ZodNumber;
+        limitations: z.ZodNumber;
+        abstentions: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ProjectDimensionSummary = z.infer<typeof projectDimensionSummarySchema>;
+export declare const stackCoverageSchema: z.ZodObject<{
+    framework: z.ZodString;
+    archetype: z.ZodString;
+    projectsCount: z.ZodNumber;
+    dimensionsCovered: z.ZodArray<z.ZodEnum<{
+        accessibility: "accessibility";
+        "information-design": "information-design";
+        architecture: "architecture";
+        "product-task": "product-task";
+        "interface-trust": "interface-trust";
+        "visual-polish": "visual-polish";
+        responsive: "responsive";
+        "runtime-reliability": "runtime-reliability";
+        "audit-precision": "audit-precision";
+    }>>;
+}, z.core.$strip>;
+export type StackCoverage = z.infer<typeof stackCoverageSchema>;
+export declare const crossProjectComparisonValidationSchema: z.ZodObject<{
+    valid: z.ZodBoolean;
+    errors: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type CrossProjectComparisonValidation = z.infer<typeof crossProjectComparisonValidationSchema>;
+export declare const crossProductReportSchema: z.ZodObject<{
+    version: z.ZodLiteral<"1.0.0">;
+    toolVersion: z.ZodString;
+    runId: z.ZodString;
+    evaluatedAt: z.ZodString;
+    projectsCount: z.ZodNumber;
+    projectSummaries: z.ZodArray<z.ZodObject<{
+        projectId: z.ZodString;
+        domain: z.ZodString;
+        archetype: z.ZodString;
+        framework: z.ZodString;
+        dimensions: z.ZodRecord<z.ZodEnum<{
+            accessibility: "accessibility";
+            "information-design": "information-design";
+            architecture: "architecture";
+            "product-task": "product-task";
+            "interface-trust": "interface-trust";
+            "visual-polish": "visual-polish";
+            responsive: "responsive";
+            "runtime-reliability": "runtime-reliability";
+            "audit-precision": "audit-precision";
+        }>, z.ZodObject<{
+            eligible: z.ZodNumber;
+            passed: z.ZodNumber;
+            findings: z.ZodNumber;
+            limitations: z.ZodNumber;
+            abstentions: z.ZodNumber;
+        }, z.core.$strip>>;
+        totals: z.ZodObject<{
+            eligible: z.ZodNumber;
+            passed: z.ZodNumber;
+            findings: z.ZodNumber;
+            limitations: z.ZodNumber;
+            abstentions: z.ZodNumber;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    dimensionTotals: z.ZodRecord<z.ZodEnum<{
+        accessibility: "accessibility";
+        "information-design": "information-design";
+        architecture: "architecture";
+        "product-task": "product-task";
+        "interface-trust": "interface-trust";
+        "visual-polish": "visual-polish";
+        responsive: "responsive";
+        "runtime-reliability": "runtime-reliability";
+        "audit-precision": "audit-precision";
+    }>, z.ZodObject<{
+        eligible: z.ZodNumber;
+        passed: z.ZodNumber;
+        findings: z.ZodNumber;
+        limitations: z.ZodNumber;
+        abstentions: z.ZodNumber;
+    }, z.core.$strip>>;
+    recurrenceTaxonomy: z.ZodArray<z.ZodObject<{
+        ruleId: z.ZodString;
+        category: z.ZodString;
+        dimension: z.ZodEnum<{
+            accessibility: "accessibility";
+            "information-design": "information-design";
+            architecture: "architecture";
+            "product-task": "product-task";
+            "interface-trust": "interface-trust";
+            "visual-polish": "visual-polish";
+            responsive: "responsive";
+            "runtime-reliability": "runtime-reliability";
+            "audit-precision": "audit-precision";
+        }>;
+        affectedProjects: z.ZodArray<z.ZodString>;
+        affectedDomains: z.ZodArray<z.ZodString>;
+        totalOccurrences: z.ZodNumber;
+        sampleMessages: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    stackCoverage: z.ZodArray<z.ZodObject<{
+        framework: z.ZodString;
+        archetype: z.ZodString;
+        projectsCount: z.ZodNumber;
+        dimensionsCovered: z.ZodArray<z.ZodEnum<{
+            accessibility: "accessibility";
+            "information-design": "information-design";
+            architecture: "architecture";
+            "product-task": "product-task";
+            "interface-trust": "interface-trust";
+            "visual-polish": "visual-polish";
+            responsive: "responsive";
+            "runtime-reliability": "runtime-reliability";
+            "audit-precision": "audit-precision";
+        }>>;
+    }, z.core.$strip>>;
+    annotations: z.ZodObject<{
+        supplied: z.ZodNumber;
+        confirmedFalsePositives: z.ZodNumber;
+        confirmedFalseNegatives: z.ZodNumber;
+        records: z.ZodArray<z.ZodObject<{
+            findingId: z.ZodOptional<z.ZodString>;
+            ruleId: z.ZodString;
+            projectId: z.ZodString;
+            type: z.ZodEnum<{
+                "false-positive": "false-positive";
+                "false-negative": "false-negative";
+            }>;
+            rationale: z.ZodString;
+            reviewedBy: z.ZodString;
+            reviewedAt: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    passed: z.ZodBoolean;
+}, z.core.$strip>;
+export type CrossProductReport = z.infer<typeof crossProductReportSchema>;

package/dist/src/portfolio/taxonomy-schema.js

@@ -0,0 +1,74 @@
+import { z } from "zod";
+export const evaluationDimensionSchema = z.enum([
+    "product-task",
+    "interface-trust",
+    "information-design",
+    "visual-polish",
+    "accessibility",
+    "responsive",
+    "architecture",
+    "runtime-reliability",
+    "audit-precision",
+]);
+export const dimensionMetricsSchema = z.object({
+    eligible: z.number().int().nonnegative(),
+    passed: z.number().int().nonnegative(),
+    findings: z.number().int().nonnegative(),
+    limitations: z.number().int().nonnegative(),
+    abstentions: z.number().int().nonnegative(),
+});
+export const recurrenceItemSchema = z.object({
+    ruleId: z.string(),
+    category: z.string(),
+    dimension: evaluationDimensionSchema,
+    affectedProjects: z.array(z.string()),
+    affectedDomains: z.array(z.string()),
+    totalOccurrences: z.number().int().positive(),
+    sampleMessages: z.array(z.string()).max(10),
+});
+export const maintainerAnnotationSchema = z.object({
+    findingId: z.string().optional(),
+    ruleId: z.string(),
+    projectId: z.string(),
+    type: z.enum(["false-positive", "false-negative"]),
+    rationale: z.string().min(1),
+    reviewedBy: z.string().min(1),
+    reviewedAt: z.string(),
+});
+export const projectDimensionSummarySchema = z.object({
+    projectId: z.string(),
+    domain: z.string(),
+    archetype: z.string(),
+    framework: z.string(),
+    dimensions: z.record(evaluationDimensionSchema, dimensionMetricsSchema),
+    totals: dimensionMetricsSchema,
+});
+export const stackCoverageSchema = z.object({
+    framework: z.string(),
+    archetype: z.string(),
+    projectsCount: z.number().int().nonnegative(),
+    dimensionsCovered: z.array(evaluationDimensionSchema),
+});
+export const crossProjectComparisonValidationSchema = z.object({
+    valid: z.boolean(),
+    errors: z.array(z.string()),
+});
+export const crossProductReportSchema = z.object({
+    version: z.literal("1.0.0"),
+    toolVersion: z.string(),
+    runId: z.string(),
+    evaluatedAt: z.string(),
+    projectsCount: z.number().int().nonnegative(),
+    projectSummaries: z.array(projectDimensionSummarySchema),
+    dimensionTotals: z.record(evaluationDimensionSchema, dimensionMetricsSchema),
+    recurrenceTaxonomy: z.array(recurrenceItemSchema),
+    stackCoverage: z.array(stackCoverageSchema),
+    annotations: z.object({
+        supplied: z.number().int().nonnegative(),
+        confirmedFalsePositives: z.number().int().nonnegative(),
+        confirmedFalseNegatives: z.number().int().nonnegative(),
+        records: z.array(maintainerAnnotationSchema),
+    }),
+    passed: z.boolean(),
+});
+//# sourceMappingURL=taxonomy-schema.js.map

package/dist/src/portfolio/taxonomy-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy-schema.js","sourceRoot":"","sources":["../../../src/portfolio/taxonomy-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,cAAc;IACd,iBAAiB;IACjB,oBAAoB;IACpB,eAAe;IACf,eAAe;IACf,YAAY;IACZ,cAAc;IACd,qBAAqB;IACrB,iBAAiB;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC5C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,yBAAyB;IACpC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAC5C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,sBAAsB,CAAC;IACvE,MAAM,EAAE,sBAAsB;CAC/B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CACtD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,sBAAsB,CAAC;IAC5E,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACxC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC;KAC7C,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC"}

package/dist/src/portfolio/taxonomy.d.ts

@@ -0,0 +1,5 @@
+import type { PortfolioBenchmarkReport } from "./runner.js";
+import type { ResolvedPortfolioProject } from "./registry.js";
+import { type CrossProductReport, type CrossProjectComparisonValidation, type MaintainerAnnotation } from "./taxonomy-schema.js";
+export declare function evaluateCrossProductTaxonomy(report: PortfolioBenchmarkReport, projects?: ResolvedPortfolioProject[], annotations?: MaintainerAnnotation[]): CrossProductReport;
+export declare function validateCrossProjectComparison(baseReport: PortfolioBenchmarkReport, candidateReport: PortfolioBenchmarkReport): CrossProjectComparisonValidation;

package/dist/src/portfolio/taxonomy.js

@@ -0,0 +1,236 @@
+import { crossProductReportSchema, } from "./taxonomy-schema.js";
+const ALL_DIMENSIONS = [
+    "product-task",
+    "interface-trust",
+    "information-design",
+    "visual-polish",
+    "accessibility",
+    "responsive",
+    "architecture",
+    "runtime-reliability",
+    "audit-precision",
+];
+function emptyMetrics() {
+    return { eligible: 0, passed: 0, findings: 0, limitations: 0, abstentions: 0 };
+}
+function mapStageToDimension(stage) {
+    switch (stage) {
+        case "source-audit":
+            return "architecture";
+        case "typecheck":
+        case "lint":
+            return "audit-precision";
+        case "unit-test":
+        case "production-build":
+            return "runtime-reliability";
+        case "local-fixture-server":
+            return "runtime-reliability";
+        case "browser-journeys":
+            return "product-task";
+        case "export-verification":
+            return "runtime-reliability";
+        case "heuristic-review":
+            return "interface-trust";
+        default:
+            return "audit-precision";
+    }
+}
+function mapFindingSourceToDimension(source, ruleId) {
+    const lower = (source + " " + ruleId).toLowerCase();
+    if (lower.includes("accessibility") || lower.includes("a11y") || lower.includes("wcag"))
+        return "accessibility";
+    if (lower.includes("trust") || lower.includes("provenance") || lower.includes("attestation"))
+        return "interface-trust";
+    if (lower.includes("information") || lower.includes("hierarchy"))
+        return "information-design";
+    if (lower.includes("visual") || lower.includes("polish") || lower.includes("css"))
+        return "visual-polish";
+    if (lower.includes("responsive") || lower.includes("viewport") || lower.includes("reflow"))
+        return "responsive";
+    if (lower.includes("architecture") || lower.includes("import") || lower.includes("coupling"))
+        return "architecture";
+    if (lower.includes("runtime") || lower.includes("journey") || lower.includes("task"))
+        return "product-task";
+    return "audit-precision";
+}
+export function evaluateCrossProductTaxonomy(report, projects = [], annotations = []) {
+    const projectMap = new Map(projects.map((p) => [p.declaration.id, p]));
+    const projectSummaries = [];
+    const dimensionTotals = {
+        "product-task": emptyMetrics(),
+        "interface-trust": emptyMetrics(),
+        "information-design": emptyMetrics(),
+        "visual-polish": emptyMetrics(),
+        accessibility: emptyMetrics(),
+        responsive: emptyMetrics(),
+        architecture: emptyMetrics(),
+        "runtime-reliability": emptyMetrics(),
+        "audit-precision": emptyMetrics(),
+    };
+    const recurrenceMap = new Map();
+    for (const projectRun of report.projects) {
+        const resolved = projectMap.get(projectRun.projectId);
+        const domain = resolved?.declaration.product.domain ?? "unknown";
+        const archetype = resolved?.declaration.product.archetype ?? "utility";
+        const framework = resolved?.declaration.technology.framework ?? projectRun.adapter ?? "unknown";
+        const dimensions = {
+            "product-task": emptyMetrics(),
+            "interface-trust": emptyMetrics(),
+            "information-design": emptyMetrics(),
+            "visual-polish": emptyMetrics(),
+            accessibility: emptyMetrics(),
+            responsive: emptyMetrics(),
+            architecture: emptyMetrics(),
+            "runtime-reliability": emptyMetrics(),
+            "audit-precision": emptyMetrics(),
+        };
+        for (const stage of projectRun.stages) {
+            const dim = mapStageToDimension(stage.stage);
+            dimensions[dim].eligible += 1;
+            if (stage.status === "passed") {
+                dimensions[dim].passed += 1;
+            }
+            else if (stage.status === "failed" || stage.status === "timed-out") {
+                dimensions[dim].findings += (stage.findings ?? 1);
+            }
+            else if (stage.status === "unsupported") {
+                dimensions[dim].limitations += 1;
+            }
+            else if (stage.status === "not-applicable") {
+                dimensions[dim].abstentions += 1;
+            }
+            if (stage.findingDetails) {
+                for (const finding of stage.findingDetails) {
+                    const findingDim = mapFindingSourceToDimension(finding.source, finding.id);
+                    const key = `${finding.source}:${finding.id}`;
+                    let rec = recurrenceMap.get(key);
+                    if (!rec) {
+                        rec = {
+                            ruleId: finding.id,
+                            category: finding.source,
+                            dimension: findingDim,
+                            affectedProjects: new Set(),
+                            affectedDomains: new Set(),
+                            totalOccurrences: 0,
+                            sampleMessages: new Set(),
+                        };
+                        recurrenceMap.set(key, rec);
+                    }
+                    rec.affectedProjects.add(projectRun.projectId);
+                    rec.affectedDomains.add(domain);
+                    rec.totalOccurrences += 1;
+                    if (rec.sampleMessages.size < 5) {
+                        rec.sampleMessages.add(finding.message);
+                    }
+                }
+            }
+        }
+        // Accumulate project totals
+        const totals = emptyMetrics();
+        for (const dim of ALL_DIMENSIONS) {
+            totals.eligible += dimensions[dim].eligible;
+            totals.passed += dimensions[dim].passed;
+            totals.findings += dimensions[dim].findings;
+            totals.limitations += dimensions[dim].limitations;
+            totals.abstentions += dimensions[dim].abstentions;
+            dimensionTotals[dim].eligible += dimensions[dim].eligible;
+            dimensionTotals[dim].passed += dimensions[dim].passed;
+            dimensionTotals[dim].findings += dimensions[dim].findings;
+            dimensionTotals[dim].limitations += dimensions[dim].limitations;
+            dimensionTotals[dim].abstentions += dimensions[dim].abstentions;
+        }
+        projectSummaries.push({
+            projectId: projectRun.projectId,
+            domain,
+            archetype,
+            framework,
+            dimensions,
+            totals,
+        });
+    }
+    // Recurrence taxonomy
+    const recurrenceTaxonomy = Array.from(recurrenceMap.values())
+        .map((rec) => ({
+        ruleId: rec.ruleId,
+        category: rec.category,
+        dimension: rec.dimension,
+        affectedProjects: Array.from(rec.affectedProjects).sort(),
+        affectedDomains: Array.from(rec.affectedDomains).sort(),
+        totalOccurrences: rec.totalOccurrences,
+        sampleMessages: Array.from(rec.sampleMessages),
+    }))
+        .sort((a, b) => b.totalOccurrences - a.totalOccurrences);
+    // Stack coverage
+    const stackMap = new Map();
+    for (const summary of projectSummaries) {
+        const key = `${summary.framework}:${summary.archetype}`;
+        let stack = stackMap.get(key);
+        if (!stack) {
+            stack = { framework: summary.framework, archetype: summary.archetype, projectsCount: 0, dims: new Set() };
+            stackMap.set(key, stack);
+        }
+        stack.projectsCount += 1;
+        for (const dim of ALL_DIMENSIONS) {
+            if (summary.dimensions[dim].eligible > 0)
+                stack.dims.add(dim);
+        }
+    }
+    const stackCoverage = Array.from(stackMap.values()).map((s) => ({
+        framework: s.framework,
+        archetype: s.archetype,
+        projectsCount: s.projectsCount,
+        dimensionsCovered: Array.from(s.dims).sort(),
+    }));
+    // Annotations
+    const confirmedFalsePositives = annotations.filter((a) => a.type === "false-positive").length;
+    const confirmedFalseNegatives = annotations.filter((a) => a.type === "false-negative").length;
+    const result = {
+        version: "1.0.0",
+        toolVersion: report.toolVersion,
+        runId: report.runId,
+        evaluatedAt: new Date().toISOString(),
+        projectsCount: report.projects.length,
+        projectSummaries,
+        dimensionTotals,
+        recurrenceTaxonomy,
+        stackCoverage,
+        annotations: {
+            supplied: annotations.length,
+            confirmedFalsePositives,
+            confirmedFalseNegatives,
+            records: annotations,
+        },
+        passed: report.passed,
+    };
+    return crossProductReportSchema.parse(result);
+}
+export function validateCrossProjectComparison(baseReport, candidateReport) {
+    const errors = [];
+    if (baseReport.toolVersion !== candidateReport.toolVersion) {
+        errors.push(`Tool version mismatch: base uses ${baseReport.toolVersion}, candidate uses ${candidateReport.toolVersion}.`);
+    }
+    if (baseReport.mode !== candidateReport.mode) {
+        errors.push(`Mode mismatch: base uses ${baseReport.mode}, candidate uses ${candidateReport.mode}.`);
+    }
+    if (baseReport.projects.length !== candidateReport.projects.length) {
+        errors.push(`Project count mismatch: base has ${baseReport.projects.length}, candidate has ${candidateReport.projects.length}.`);
+    }
+    const baseProjects = new Map(baseReport.projects.map((p) => [p.projectId, p]));
+    for (const candProj of candidateReport.projects) {
+        const baseProj = baseProjects.get(candProj.projectId);
+        if (!baseProj) {
+            errors.push(`Project missing from baseline: ${candProj.projectId}.`);
+            continue;
+        }
+        const baseViewports = baseProj.stages.flatMap((s) => s.viewports ?? []);
+        const candViewports = candProj.stages.flatMap((s) => s.viewports ?? []);
+        if (JSON.stringify(baseViewports) !== JSON.stringify(candViewports)) {
+            errors.push(`Viewport configuration mismatch for project ${candProj.projectId}.`);
+        }
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+    };
+}
+//# sourceMappingURL=taxonomy.js.map

package/dist/src/portfolio/taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.js","sourceRoot":"","sources":["../../../src/portfolio/taxonomy.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wBAAwB,GAUzB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,cAAc,GAA0B;IAC5C,cAAc;IACd,iBAAiB;IACjB,oBAAoB;IACpB,eAAe;IACf,eAAe;IACf,YAAY;IACZ,cAAc;IACd,qBAAqB;IACrB,iBAAiB;CAClB,CAAC;AAEF,SAAS,YAAY;IACnB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,iBAAiB,CAAC;QAC3B,KAAK,WAAW,CAAC;QACjB,KAAK,kBAAkB;YACrB,OAAO,qBAAqB,CAAC;QAC/B,KAAK,sBAAsB;YACzB,OAAO,qBAAqB,CAAC;QAC/B,KAAK,kBAAkB;YACrB,OAAO,cAAc,CAAC;QACxB,KAAK,qBAAqB;YACxB,OAAO,qBAAqB,CAAC;QAC/B,KAAK,kBAAkB;YACrB,OAAO,iBAAiB,CAAC;QAC3B;YACE,OAAO,iBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc,EAAE,MAAc;IACjE,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,eAAe,CAAC;IAChH,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACvH,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,oBAAoB,CAAC;IAC9F,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IAC1G,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC;IAChH,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,cAAc,CAAC;IACpH,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC;IAC5G,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,MAAgC,EAChC,WAAuC,EAAE,EACzC,cAAsC,EAAE;IAExC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAA8B,EAAE,CAAC;IAEvD,MAAM,eAAe,GAAkD;QACrE,cAAc,EAAE,YAAY,EAAE;QAC9B,iBAAiB,EAAE,YAAY,EAAE;QACjC,oBAAoB,EAAE,YAAY,EAAE;QACpC,eAAe,EAAE,YAAY,EAAE;QAC/B,aAAa,EAAE,YAAY,EAAE;QAC7B,UAAU,EAAE,YAAY,EAAE;QAC1B,YAAY,EAAE,YAAY,EAAE;QAC5B,qBAAqB,EAAE,YAAY,EAAE;QACrC,iBAAiB,EAAE,YAAY,EAAE;KAClC,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,GAAG,EAW1B,CAAC;IAEJ,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC;QACjE,MAAM,SAAS,GAAG,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC;QACvE,MAAM,SAAS,GAAG,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,OAAO,IAAI,SAAS,CAAC;QAEhG,MAAM,UAAU,GAAkD;YAChE,cAAc,EAAE,YAAY,EAAE;YAC9B,iBAAiB,EAAE,YAAY,EAAE;YACjC,oBAAoB,EAAE,YAAY,EAAE;YACpC,eAAe,EAAE,YAAY,EAAE;YAC/B,aAAa,EAAE,YAAY,EAAE;YAC7B,UAAU,EAAE,YAAY,EAAE;YAC1B,YAAY,EAAE,YAAY,EAAE;YAC5B,qBAAqB,EAAE,YAAY,EAAE;YACrC,iBAAiB,EAAE,YAAY,EAAE;SAClC,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;YAE9B,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9B,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACrE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC1C,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAC7C,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;YACnC,CAAC;YAED,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBACzB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;oBAC3C,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC3E,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBAC9C,IAAI,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACjC,IAAI,CAAC,GAAG,EAAE,CAAC;wBACT,GAAG,GAAG;4BACJ,MAAM,EAAE,OAAO,CAAC,EAAE;4BAClB,QAAQ,EAAE,OAAO,CAAC,MAAM;4BACxB,SAAS,EAAE,UAAU;4BACrB,gBAAgB,EAAE,IAAI,GAAG,EAAE;4BAC3B,eAAe,EAAE,IAAI,GAAG,EAAE;4BAC1B,gBAAgB,EAAE,CAAC;4BACnB,cAAc,EAAE,IAAI,GAAG,EAAE;yBAC1B,CAAC;wBACF,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAC9B,CAAC;oBACD,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;oBAC/C,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAChC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC;oBAC1B,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;wBAChC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,MAAM,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC5C,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;YACxC,MAAM,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC5C,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;YAClD,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;YAElD,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC1D,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;YACtD,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC1D,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;YAChE,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;QAClE,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC;YACpB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,MAAM;YACN,SAAS;YACT,SAAS;YACT,UAAU;YACV,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,MAAM,kBAAkB,GAAqB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;SAC5E,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACzD,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE;QACvD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;KAC/C,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE3D,iBAAiB;IACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2G,CAAC;IACpI,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACxD,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YAC1G,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAoB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;KAC7C,CAAC,CAAC,CAAC;IAEJ,cAAc;IACd,MAAM,uBAAuB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,MAAM,CAAC;IAC9F,MAAM,uBAAuB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,MAAM,CAAC;IAE9F,MAAM,MAAM,GAAuB;QACjC,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACrC,gBAAgB;QAChB,eAAe;QACf,kBAAkB;QAClB,aAAa;QACb,WAAW,EAAE;YACX,QAAQ,EAAE,WAAW,CAAC,MAAM;YAC5B,uBAAuB;YACvB,uBAAuB;YACvB,OAAO,EAAE,WAAW;SACrB;QACD,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IAEF,OAAO,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAAoC,EACpC,eAAyC;IAEzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,UAAU,CAAC,WAAW,KAAK,eAAe,CAAC,WAAW,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,oCAAoC,UAAU,CAAC,WAAW,oBAAoB,eAAe,CAAC,WAAW,GAAG,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,4BAA4B,UAAU,CAAC,IAAI,oBAAoB,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC;IACtG,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,oCAAoC,UAAU,CAAC,QAAQ,CAAC,MAAM,mBAAmB,eAAe,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACnI,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YACpE,MAAM,CAAC,IAAI,CAAC,+CAA+C,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/src/portfolio/vault.d.ts

@@ -0,0 +1,53 @@
+import { z } from "zod";
+import type { PortfolioProject } from "./schema.js";
+export declare const evidenceClassSchema: z.ZodEnum<{
+    "private-raw": "private-raw";
+    "redacted-report": "redacted-report";
+    "approved-screenshot": "approved-screenshot";
+    "public-synthetic": "public-synthetic";
+    "aggregate-metrics": "aggregate-metrics";
+}>;
+export declare const policyDecisionSchema: z.ZodEnum<{
+    "public-synthetic": "public-synthetic";
+    "retained-by-policy": "retained-by-policy";
+    "redacted-machine-path": "redacted-machine-path";
+    "screenshot-opt-in-approved": "screenshot-opt-in-approved";
+    "screenshot-disabled-by-policy": "screenshot-disabled-by-policy";
+}>;
+export type EvidenceClass = z.infer<typeof evidenceClassSchema>;
+export type PolicyDecision = z.infer<typeof policyDecisionSchema>;
+export type ScanResult = {
+    passed: boolean;
+    violations: Array<{
+        type: "secret" | "prohibited-absolute-path";
+        pattern: string;
+        snippet: string;
+    }>;
+};
+export type VaultArtifactInput = {
+    path: string;
+    kind: "report" | "screenshot" | "download" | "other" | "log";
+    bytes: number;
+    sha256: string;
+    evidenceClass?: EvidenceClass;
+    policyDecision?: PolicyDecision;
+    sourceDigest?: string;
+};
+export declare function scanTextForSecretsAndPaths(content: string, options?: {
+    allowWorkspaceRoot?: string;
+    allowSourceRoot?: string;
+}): ScanResult;
+export declare function redactMachinePathsAndSecrets(content: string, context?: {
+    workspaceRoot?: string;
+    sourceRoot?: string;
+    allowedEnvironmentVariables?: string[];
+}): string;
+export declare function enforceArtifactPublicationPolicy(artifacts: VaultArtifactInput[], project: PortfolioProject, sourceDigest?: string): {
+    retainedArtifacts: VaultArtifactInput[];
+    purgedArtifacts: VaultArtifactInput[];
+};
+export declare function deleteProjectEvidence(runRoot: string, runId: string, projectId?: string): Promise<{
+    deletedFiles: number;
+    runId: string;
+    projectId?: string;
+}>;