canary-test-cli 7.0.0 → 7.1.0

package/dist/engine/guardian/adjudication.js

@@ -162,9 +162,9 @@ export function tallyAdjudications(reactions) {
 const FINDING_ROW_RE = /^\|[^|]*\|\s*\[?`([^`]+)`/;
 /**
  * Extract the file paths of the ACTIVE findings shown in a sticky-comment body
- * (PURE). Reads the rendered table `render(fmt='comment')` emitted — this is
- * deliberately parsing the exact body reviewers reacted to, not the current
- * finding set, so a reaction is attributed to what the reviewer actually saw.
+ * (PURE). Reads the rendered table `renderFindings(fmt='comment')` emitted —
+ * this is deliberately parsing the exact body reviewers reacted to, not the
+ * current finding set, so a reaction is attributed to what the reviewer saw.
  * Returns `[]` for a no-gaps body (no table).
  */
 export function activeFindingPaths(commentBody) {
@@ -204,7 +204,7 @@ export function adjudicationFilename(prNumber) {
     return `${ADJUDICATION_SOURCE}-pr-${prNumber}.json`;
 }
 /** True iff the harness home (`dirname(analysesDir)`) exists. */
-function channelAvailable(analysesDir) {
+function isChannelAvailable(analysesDir) {
     try {
         return statSync(dirname(analysesDir)).isDirectory();
     }
@@ -241,7 +241,7 @@ export async function collectAdjudications(client, args) {
         tally,
         collectedAt: args.collectedAt,
     });
-    if (!channelAvailable(args.analysesDir)) {
+    if (!isChannelAvailable(args.analysesDir)) {
         return {
             action: 'unavailable',
             path: null,

package/dist/engine/guardian/analysis-emit.js

@@ -14,7 +14,7 @@
  *     canary's records -- they never clobber a harness record and always pass
  *     `AnalysisArchive.safePath` (no traversal).
  *   - {@link buildAnalysisRecord} -- the v1.0 envelope wrapping the verbatim
- *     `render(fmt="json")` findings array.
+ *     `renderFindings(fmt="json")` findings array.
  *
  * SC-11 boundary: this module is deterministic filesystem/JSON only. It imports
  * no `AgentTier`/LLM-SDK module (only intra-guardian, agent-free helpers).
@@ -34,36 +34,21 @@
 import { createHash, randomBytes } from 'node:crypto';
 import { mkdirSync, renameSync, statSync, unlinkSync, writeFileSync, } from 'node:fs';
 import { dirname, join } from 'node:path';
+import { ensureAscii } from '../util/ensure-ascii.js';
 import { coverageDegradedNotice, coverageStatus, } from './coverage.js';
-import { combineNotices, render } from './pr-check.js';
+import { combineNotices, renderFindings } from './pr-check.js';
 // 1.1 adds the additive `coverage` block (#554); readers of 1.0 are unaffected.
 // 1.2 adds the additive `skipped` list (#582). Additive again, and bumped again
 // for the reason recorded in #572: a reader that pins a version must be able to
 // tell which fields it can rely on being present, and silence about a new field
 // is indistinguishable from the field being absent for a real reason.
 export const SCHEMA_VERSION = '1.2';
-export const SOURCE = 'canary-pr-guardian';
+const ANALYSIS_SOURCE = 'canary-pr-guardian';
 const REF_SAFE = /[^A-Za-z0-9._-]/g;
 const REF_MAX = 100; // cap the sanitized ref so a long branch never hits ENAMETOOLONG
 // The loud-fallback notices carry an em-dash (U+2014) as output data; written as
 // an escape to honor the ASCII-source rule.
 const EM_DASH = '\u{2014}';
-/**
- * Escape every non-ASCII (>= U+0080) code unit to a `\uXXXX` sequence, matching
- * Python's `json.dumps(..., ensure_ascii=True)` (the library default).
- */
-function ensureAscii(json) {
-    // Escape every UTF-16 code UNIT >= 0x80 to \uXXXX, matching Python
-    // json.dumps(ensure_ascii=True). Iterating by unit (not code point) means an
-    // astral char's surrogate pair emits \udXXX\udXXX, like Python; a code-point
-    // regex would stop at U+FFFF and leave astral chars raw.
-    let out = '';
-    for (let i = 0; i < json.length; i++) {
-        const c = json.charCodeAt(i);
-        out += c >= 0x80 ? '\\u' + c.toString(16).padStart(4, '0') : json[i];
-    }
-    return out;
-}
 /** Trim leading/trailing `-` characters (Python `str.strip("-")`). */
 function stripDashes(value) {
     return value.replace(/^-+/, '').replace(/-+$/, '');
@@ -76,7 +61,7 @@ function stripDashes(value) {
  * `REF_MAX` chars with a short hash suffix appended to preserve uniqueness --
  * only when truncation actually happens. Short refs are unchanged.
  */
-export function analysisFilename(ref, source = SOURCE) {
+export function analysisFilename(ref, source = ANALYSIS_SOURCE) {
     let safe = stripDashes(ref.replace(REF_SAFE, '-')) || 'local';
     if (safe.length > REF_MAX) {
         // sha1 is a filename disambiguator (not a security digest); it matches the
@@ -96,7 +81,8 @@ function isoUtcNow() {
     return new Date().toISOString().replace('Z', '+00:00');
 }
 /**
- * Build the v1.0 envelope. `findings` is exactly `render(fmt='json')`'s array.
+ * Build the v1.0 envelope. `findings` is exactly the array from
+ * `renderFindings(fmt='json')`.
  */
 export function buildAnalysisRecord(findings, args) {
     const { ref, gate, effective_tier, degraded_notice, exit_code } = args;
@@ -104,7 +90,7 @@ export function buildAnalysisRecord(findings, args) {
     // input's — so "no findings" can never be read as "coverage said so".
     const coverage = args.coverage ?? null;
     const notice = combineNotices(degraded_notice, coverage ? coverageDegradedNotice(coverage) : null);
-    const inner = JSON.parse(render(findings, 'json', effective_tier, notice));
+    const inner = JSON.parse(renderFindings(findings, 'json', effective_tier, notice));
     const active = findings.filter((f) => !f.suppressed);
     const suppressed = findings.filter((f) => f.suppressed);
     const byFidelity = {};
@@ -113,7 +99,7 @@ export function buildAnalysisRecord(findings, args) {
     }
     return {
         schemaVersion: SCHEMA_VERSION,
-        source: SOURCE,
+        source: ANALYSIS_SOURCE,
         ref,
         gate,
         exitCode: exit_code,
@@ -151,7 +137,7 @@ export const emitSeams = {
  * The analyses dir itself is created on demand by {@link emitAnalysis} (mirroring
  * harness `AnalysisArchive.save`'s recursive `mkdir`).
  */
-export function channelAvailable(analysesDir) {
+export function isChannelAvailable(analysesDir) {
     try {
         return statSync(dirname(analysesDir)).isDirectory();
     }
@@ -168,7 +154,7 @@ export function channelAvailable(analysesDir) {
  */
 export function emitAnalysis(findings, args) {
     const { analysesDir } = args;
-    if (!channelAvailable(analysesDir)) {
+    if (!isChannelAvailable(analysesDir)) {
         return {
             action: 'unavailable',
             path: null,
@@ -178,8 +164,8 @@ export function emitAnalysis(findings, args) {
     }
     const target = join(analysesDir, analysisFilename(args.ref));
     try {
-        // Build INSIDE the try: a non-I/O error (from JSON/render) would otherwise
-        // crash pr-check instead of degrading.
+        // Build INSIDE the try: a non-I/O error (from JSON/renderFindings) would
+        // otherwise crash pr-check instead of degrading.
         const record = emitSeams.buildAnalysisRecord(findings, args);
         mkdirSync(analysesDir, { recursive: true });
         // Atomic write: stage into a same-dir temp then rename (atomic on one

package/dist/engine/guardian/cli.js

@@ -13,8 +13,8 @@
  *     `_branch_protection_client` seams were replaced.
  *   - Commands are THIN: parse -> call the already-ported guardian library ->
  *     emit. No business logic lives in a handler.
- *   - Business exit codes are carried by throwing {@link CliExit} (Python's
- *     `typer.Exit(n)`); `parseAsync` from a test catches it to read the code.
+ *   - Business exit codes are carried by throwing {@link CliExitError}
+ *     (Python's `typer.Exit(n)`); a test's `parseAsync` catches it to read it.
  *     `.exitOverride()` turns commander's own usage errors into throws too, so a
  *     test never terminates the process.
  *
@@ -58,7 +58,8 @@ import { buildApiDelta, writeApiDelta } from './delta-emitter.js';
 import { extractApiDiff } from './diff-extractor.js';
 import { HardGateAbstained, HardGateBlocked, RestBranchProtectionClient, applyHardGate, renderPlaybook, } from './hard-gate.js';
 import { mapImpact } from './impact-mapper.js';
-import { applySuppressions, buildFindings, buildWeakTestFindings, computeExitCode, effectiveGraphDepth, filterHeuristicNoise, filterSkipped, filterTestSupportUnits, filterTestUnits, filterTypeOnlyUnits, findReexportOnly, loadGuardianConfig, render, scopeDiff, } from './pr-check.js';
+import { ensureAscii } from '../util/ensure-ascii.js';
+import { applySuppressions, buildFindings, buildWeakTestFindings, computeExitCode, effectiveGraphDepth, filterHeuristicNoise, filterSkipped, filterTestSupportUnits, filterTestUnits, filterTypeOnlyUnits, findReexportOnly, loadGuardianConfig, renderFindings, scopeDiff, } from './pr-check.js';
 import { RestGitHubClient, degradationAnnotation, upsertStickyComment, } from './pr-comment.js';
 import { buildSummary } from './summary-emitter.js';
 import { resolveTier } from './tier.js';
@@ -71,12 +72,12 @@ const CROSS = '\u{2717}';
  * Business exit signal. Thrown from a handler to carry an exit code the way
  * Python's `typer.Exit(code)` did; the runner catches it to read the code.
  */
-export class CliExit extends Error {
+export class CliExitError extends Error {
     code;
     constructor(code) {
         super(`exit ${code}`);
         this.code = code;
-        this.name = 'CliExit';
+        this.name = 'CliExitError';
     }
 }
 /**
@@ -94,10 +95,10 @@ function normalizeUsageExit(err) {
     throw err;
 }
 /** Raised by `deps.sleep` to break the `watch` poll loop (Ctrl+C analog). */
-export class WatchInterrupt extends Error {
+export class WatchInterruptError extends Error {
     constructor() {
         super('watch interrupted');
-        this.name = 'WatchInterrupt';
+        this.name = 'WatchInterruptError';
     }
 }
 /** Process-backed defaults for production (the `guardianCommand` export). */
@@ -148,21 +149,6 @@ export function defaultDeps() {
         sleep: (secs) => new Promise((resolve) => setTimeout(resolve, secs * 1000)),
     };
 }
-/**
- * Escape non-ASCII to `\uXXXX`, matching Python `json.dumps(ensure_ascii=True)`.
- */
-function ensureAscii(json) {
-    // Escape every UTF-16 code UNIT >= 0x80 to \uXXXX, matching Python
-    // json.dumps(ensure_ascii=True). Iterating by unit (not code point) means an
-    // astral char's surrogate pair emits \udXXX\udXXX, like Python; a code-point
-    // regex would stop at U+FFFF and leave astral chars raw.
-    let out = '';
-    for (let i = 0; i < json.length; i++) {
-        const c = json.charCodeAt(i);
-        out += c >= 0x80 ? '\\u' + c.toString(16).padStart(4, '0') : json[i];
-    }
-    return out;
-}
 /** ISO-8601 UTC timestamp with a `+00:00` offset (Python `isoformat`-shaped). */
 function isoUtcNow() {
     return new Date().toISOString().replace('Z', '+00:00');
@@ -212,8 +198,9 @@ export function prContextFromEnv(env) {
  * the contributor's branch and stays resolvable.
  *
  * Returns `null` rather than a partial URL whenever repo or SHA is missing, so
- * {@link render} falls back to plain code text. That degradation is deliberate:
- * an unresolvable link still *looks* clickable, which is worse than no link.
+ * {@link renderFindings} falls back to plain code text. That degradation is
+ * deliberate: an unresolvable link still *looks* clickable, which is worse than
+ * no link.
  */
 export function blobBaseFromEnv(env) {
     const repo = env['GITHUB_REPOSITORY'];
@@ -513,7 +500,7 @@ function warnIfEmptyCiDiff(resolved, unitCount, deps) {
 function loadSpec(path, deps) {
     if (!existsSync(path)) {
         deps.err(`Spec file not found: ${path}`);
-        throw new CliExit(2);
+        throw new CliExitError(2);
     }
     const text = readFileSync(path, 'utf-8');
     // Python `_load_spec`: `.json` -> json.loads; otherwise yaml.safe_load (with a
@@ -627,16 +614,16 @@ function validateCoverageCmd(path, opts, deps) {
         const st = statSync(path);
         if (st.isDirectory() || st.size > MAX_COVERAGE_BYTES) {
             deps.out(`${pc.red(pc.bold(`${CROSS} cannot read ${path}:`))} not a readable file within the size limit`);
-            throw new CliExit(2);
+            throw new CliExitError(2);
         }
         text = readFileSync(path, 'utf-8');
     }
     catch (exc) {
-        if (exc instanceof CliExit)
+        if (exc instanceof CliExitError)
             throw exc;
         const msg = exc instanceof Error ? exc.message : String(exc);
         deps.out(`${pc.red(pc.bold(`${CROSS} cannot read ${path}:`))} ${msg}`);
-        throw new CliExit(2);
+        throw new CliExitError(2);
     }
     let data;
     try {
@@ -645,7 +632,7 @@ function validateCoverageCmd(path, opts, deps) {
     catch (exc) {
         const msg = exc instanceof Error ? exc.message : String(exc);
         deps.out(`${pc.red(pc.bold(`${CROSS} ${path} is not valid JSON:`))} ${msg}`);
-        throw new CliExit(2);
+        throw new CliExitError(2);
     }
     const problems = validateCoverageJson(data);
     const errors = problems.filter((p) => p.severity === 'error');
@@ -692,7 +679,7 @@ function validateCoverageCmd(path, opts, deps) {
         }
     }
     if (errors.length > 0 || (opts.strict && warnings.length > 0)) {
-        throw new CliExit(1);
+        throw new CliExitError(1);
     }
 }
 /**
@@ -713,7 +700,7 @@ async function hardenGateCmd(opts, deps) {
     const repo = opts.repo;
     if (!repo) {
         deps.out(`${pc.red(pc.bold(`${CROSS} no repo`))} ${EM_DASH} pass --repo owner/repo or set GITHUB_REPOSITORY.`);
-        throw new CliExit(2);
+        throw new CliExitError(2);
     }
     const playbook = renderPlaybook(repo, opts.branch, opts.check);
     // #490: the readiness evidence the promotion is supposed to rest on.
@@ -730,7 +717,7 @@ async function hardenGateCmd(opts, deps) {
     if (!opts.token) {
         deps.out(`${pc.red(pc.bold(`${CROSS} --apply needs an admin token`))} (pass --token or set GITHUB_TOKEN).\n`);
         deps.out(playbook);
-        throw new CliExit(2);
+        throw new CliExitError(2);
     }
     const client = deps.buildBranchProtectionClient(repo, opts.token);
     let plan;
@@ -745,12 +732,12 @@ async function hardenGateCmd(opts, deps) {
             deps.out(outcome.summaryLine);
             deps.out(`${pc.red(pc.bold(`${CROSS} ${exc.reason}`))}\n`);
             deps.out(exc.playbook);
-            throw new CliExit(outcome.exitCode); // 3, never 1
+            throw new CliExitError(outcome.exitCode); // 3, never 1
         }
         if (exc instanceof HardGateBlocked) {
             deps.out(`${pc.red(pc.bold(`${CROSS} ${exc.reason}`))}\n`);
             deps.out(exc.playbook);
-            throw new CliExit(1);
+            throw new CliExitError(1);
         }
         throw exc;
     }
@@ -785,7 +772,7 @@ async function collectAdjudicationsCmd(opts, deps) {
     }
     if (!repo || prNumber === undefined) {
         deps.out(`${pc.red(pc.bold(`${CROSS} no PR context`))} ${EM_DASH} pass --repo and --pr, or run in Actions.`);
-        throw new CliExit(2);
+        throw new CliExitError(2);
     }
     const client = deps.buildReactionsClient(repo, prNumber);
     const res = await collectAdjudications(client, {
@@ -811,7 +798,7 @@ async function collectAdjudicationsCmd(opts, deps) {
     }
     if (res.action === 'unavailable') {
         deps.out(pc.red(pc.bold(`${CROSS} ${res.notice ?? 'not persisted'}`)));
-        throw new CliExit(1);
+        throw new CliExitError(1);
     }
 }
 /** Aggregate the persisted adjudications into the promotion evidence (#490). */
@@ -835,7 +822,7 @@ function precisionCmd(opts, deps) {
  * read-only-token degradation is surfaced LOUDLY.
  */
 async function postStickyComment(findings, resolution, deps, gateMeta = null) {
-    const body = render(findings, 'comment', resolution.effective, resolution.degraded_notice, gateMeta, blobBaseFromEnv(deps.env));
+    const body = renderFindings(findings, 'comment', resolution.effective, resolution.degraded_notice, gateMeta, blobBaseFromEnv(deps.env));
     const ctx = prContextFromEnv(deps.env);
     if (ctx === null) {
         deps.out(`guardian: no PR context in env ${EM_DASH} printing instead.`);
@@ -905,7 +892,7 @@ function abstainPrCheck(skipped, format, deps) {
         // only surface a machine can read.
         { findings: [], tier: 0, checked: 0, abstained: true, skipped }, null, 2)));
     }
-    throw new CliExit(outcome.exitCode); // EXIT_ABSTAINED
+    throw new CliExitError(outcome.exitCode); // EXIT_ABSTAINED
 }
 /** Resolve the analyses-channel dir (test override, else repo-root default). */
 function resolveAnalysesDir(override, deps) {
@@ -968,7 +955,7 @@ async function prCheckCmd(opts, deps) {
     // entirely (no diff scoped, no comment posted, exit 0).
     if (opts.postComment && !config.pr_enabled) {
         deps.out(`guardian: pr.enabled is false ${EM_DASH} skipping PR surface.`);
-        throw new CliExit(0);
+        throw new CliExitError(0);
     }
     const effectiveGate = opts.gate ?? config.pr_gate;
     // #490: read reviewer 👍/👎 off the PREVIOUS run's sticky comment before this
@@ -1109,9 +1096,9 @@ async function prCheckCmd(opts, deps) {
     }
     else if (!opts.emitAnalysis && !opts.postComment) {
         // Local, non-posting default: render to stdout in `--format`.
-        deps.out(render(findings, opts.format, resolution.effective, resolution.degraded_notice, gateMeta, blobBaseFromEnv(deps.env)));
+        deps.out(renderFindings(findings, opts.format, resolution.effective, resolution.degraded_notice, gateMeta, blobBaseFromEnv(deps.env)));
     }
-    throw new CliExit(exitCode);
+    throw new CliExitError(exitCode);
 }
 // --- author-plan --------------------------------------------------------------
 /**
@@ -1246,7 +1233,7 @@ async function watchCmd(opts, deps) {
         }
     }
     catch (exc) {
-        if (exc instanceof WatchInterrupt) {
+        if (exc instanceof WatchInterruptError) {
             deps.out(`\n${pc.yellow('Watch stopped.')}`);
             return;
         }
@@ -1262,7 +1249,7 @@ function collect(value, previous) {
  * Build a fresh `guardian` command wired to `depsInit` (process-backed defaults
  * fill any gap). Every subcommand uses `.exitOverride()` so a usage error throws
  * a `CommanderError` rather than terminating the process -- tests read the exit
- * code from the thrown error (or from {@link CliExit} for business exits).
+ * code from the thrown error (or from {@link CliExitError} for business exits).
  */
 export function createGuardianCommand(depsInit = {}) {
     const deps = { ...defaultDeps(), ...depsInit };

package/dist/engine/guardian/coverage.js

@@ -36,7 +36,7 @@ export { coverageLimits } from './diff-coverage/formats/cobertura.js';
 export { parseCoverageJson } from './diff-coverage/formats/coverage-json.js';
 export { validateCoverageJson, } from './diff-coverage/formats/coverage-json-lint.js';
 export { resolveFromGraph } from './diff-coverage/graph-tier.js';
-export { resolveHeuristic } from './diff-coverage/heuristic-tier.js';
+export { resolveFromHeuristic } from './diff-coverage/heuristic-tier.js';
 export { coverageDegradedNotice, coverageStatus, resolveCoverage, resolveCoverageWithInput, } from './diff-coverage/orchestrator.js';
 export { isSourcePath, isTestPath, isTestSupportPath, } from './diff-coverage/paths.js';
 export { resolveFromReport } from './diff-coverage/report-tier.js';

package/dist/engine/guardian/diff-coverage/heuristic-tier.js

@@ -109,7 +109,7 @@ function iterTestFiles(repoRoot) {
  * A unit is heuristic-covered iff some test file under `repoRoot` references
  * the unit's file stem or a top-level symbol name (word-boundary scan).
  */
-export function resolveHeuristic(units, repoRoot = '.') {
+export function resolveFromHeuristic(units, repoRoot = '.') {
     const testFiles = iterTestFiles(repoRoot);
     const results = [];
     for (const unit of units) {

package/dist/engine/guardian/diff-coverage/orchestrator.js

@@ -4,7 +4,7 @@
  * clean" from "never checked".
  */
 import { resolveFromGraph } from './graph-tier.js';
-import { resolveHeuristic } from './heuristic-tier.js';
+import { resolveFromHeuristic } from './heuristic-tier.js';
 import { matchUnitsToIndex, readReportIndex } from './report-tier.js';
 /**
  * SC-3 orchestrator: resolve each unit at the highest available fidelity.
@@ -116,7 +116,7 @@ export function resolveCoverageWithInput(units, options = {}) {
         }
     }
     if (remaining.length > 0) {
-        for (const r of resolveHeuristic(remaining, repoRoot)) {
+        for (const r of resolveFromHeuristic(remaining, repoRoot)) {
             resolved.set(r.unit, r);
         }
     }

package/dist/engine/guardian/pr-check.js

@@ -30,6 +30,7 @@ import { readJsonWithWarning } from '../core/config-validation.js';
 import { isAssertionFreeTest } from '../core/quality-scorer.js';
 import { Fidelity, coverageDegradedNotice, coverageStatus, isSourcePath, isTestPath, isTestSupportPath, isTypeOnlyModule, } from './coverage.js';
 import { Severity, severitySortKey } from './impact-mapper.js';
+import { ensureAscii } from '../util/ensure-ascii.js';
 const HUNK_RE = /^@@ -\d+(?:,\d+)? \+(\d+)(?:,(\d+))? @@/;
 // Suppression annotation: `// canary:allow-untested <reason>` or the `#`
 // variant. A comment leader (`//` or `#`) is REQUIRED immediately before the
@@ -859,9 +860,9 @@ const STICKY_MARKER = '<!-- canary-pr-guardian -->';
  * silently produces nothing on exactly the large PRs that need it most -- the
  * same silent-green failure #369 was filed for.
  *
- * 60,000 leaves ~5.5k of headroom for anything appended outside `render`
- * (degradation annotations, upsert wrappers) without inviting a body that only
- * *just* fits and then breaks when a filename grows.
+ * 60,000 leaves ~5.5k of headroom for anything appended outside
+ * `renderFindings` (degradation annotations, upsert wrappers) without inviting
+ * a body that only *just* fits and then breaks when a filename grows.
  *
  * The cap applies ONLY to the comment. The `--emit-analysis` JSON record is the
  * authoritative complete set and is never truncated.
@@ -893,17 +894,6 @@ const SEVERITY_ICON = {
     [Severity.MEDIUM]: YELLOW_CIRCLE,
     [Severity.LOW]: WHITE_CIRCLE,
 };
-/**
- * Escape every non-ASCII (>= U+0080) code unit to a `\uXXXX` sequence, matching
- * Python's `json.dumps(..., ensure_ascii=True)` (the library default). `JSON`
- * `.stringify` emits raw UTF-8 for these, so a finding whose evidence carries an
- * em-dash (`—`, U+2014) would otherwise diverge byte-for-byte from the Python
- * oracle. Only touches the >= 0x80 range, so the ASCII escapes JSON.stringify
- * already produced (`\"`, `\\`, control chars) are left intact.
- */
-function ensureAscii(json) {
-    return json.replace(/[€-￿]/g, (ch) => '\\u' + ch.charCodeAt(0).toString(16).padStart(4, '0'));
-}
 /** Serialize a {@link GuardianFinding} to a stable JSON-friendly object. */
 function findingDict(finding) {
     return {
@@ -955,7 +945,7 @@ function noGapsLines(coverageState, suppressedCount) {
     }
     return lines;
 }
-export function render(findings, fmt, tier = 0, degradedNotice = null, gateMeta = null, blobBase = null) {
+export function renderFindings(findings, fmt, tier = 0, degradedNotice = null, gateMeta = null, blobBase = null) {
     const ordered = [...findings].sort((a, b) => severitySortKey(a.severity) - severitySortKey(b.severity));
     // #554: the coverage ladder's own degradation, stated alongside the tier's.
     const coverageState = gateMeta?.coverage ?? null;

package/dist/engine/guardian/pr-comment.js

@@ -32,9 +32,10 @@
  *     permission error here; any other non-2xx propagates as a generic error.
  */
 import { readAllPages, restPageReader } from './github-paging.js';
-// Single source of truth for the sticky-comment marker. `pr_check.render`
-// emits the identical literal at the head of a `comment`-format body so
-// `findSticky` can locate the guardian comment for in-place upsert.
+// Single source of truth for the sticky-comment marker.
+// `pr_check.renderFindings` emits the identical literal at the head of a
+// `comment`-format body so `findSticky` can locate the guardian comment for
+// in-place upsert.
 export const STICKY_MARKER = '<!-- canary-pr-guardian -->';
 /**
  * A client cannot write (fork read-only token → HTTP 403).