fallow 2.101.0 → 2.103.0

package/types/output-contract.d.ts

@@ -85,6 +85,12 @@ kind: "security-blind-spots"
 kind: "dead-code"
 }) | (CombinedOutput & {
 kind: "combined"
+}) | (ReviewBriefOutput & {
+kind: "audit-brief"
+}) | (WalkthroughGuide & {
+kind: "review-walkthrough-guide"
+}) | (WalkthroughValidation & {
+kind: "review-walkthrough-validation"
 }))
 /**
  * Schema version for this output format (independent of tool version). Bump
@@ -113,6 +119,9 @@ export type SchemaVersion = 7
  * a bare string (e.g. `"2.74.0"`).
  */
 export type ToolVersion = string
+/**
+ * Audit command singleton carried by [`AuditOutput`].
+ */
 export type AuditCommand = "audit"
 /**
  * Verdict for the audit command.
@@ -444,7 +453,8 @@ export type UntestedFileActionType = ("add-tests" | "suppress-file")
  */
 export type UntestedExportActionType = ("add-test-import" | "suppress-file")
 /**
- * Churn trend indicator based on comparing recent vs older halves of the analysis period.
+ * Churn trend indicator based on comparing recent vs older halves of the
+ * analysis period.
  */
 export type ChurnTrend = ("accelerating" | "stable" | "cooling")
 export type ContributorIdentifierFormat = ("raw" | "handle" | "anonymized" | "hash")
@@ -763,6 +773,44 @@ export type SecurityVerifierVerdictStatus = ("survivor" | "dismissed" | "needs-h
  * The `fallow security blind-spots --format json` schema version.
  */
 export type SecurityBlindSpotsSchemaVersion = "1"
+/**
+ * Independently-versioned wire-version newtype for the brief envelope.
+ * Serializes as the integer `REVIEW_BRIEF_SCHEMA_VERSION`.
+ */
+export type ReviewBriefSchemaVersion = number
+/**
+ * Coarse risk classification for a changeset, a pure function of the change
+ * size (file count plus, once threaded, net lines).
+ */
+export type RiskClass = ("low" | "medium" | "high")
+/**
+ * Suggested reviewer effort, a pure function of [`RiskClass`].
+ */
+export type ReviewEffort = ("glance" | "review" | "deep_dive")
+/**
+ * The focus label for a review unit. EXACTLY two variants: `Skip` is NOT
+ * representable, so the type system is the guarantee that free mode never emits
+ * a `skip` label (safe explicit-skip is paid, runtime-backed only). Mirrors
+ * the decision surface's "cut category not representable" structural posture.
+ */
+export type FocusLabel = ("review-here" | "not-prioritized")
+/**
+ * A per-unit confidence flag. The EXACT panel-decided strings: a dynamically-
+ * wired or re-export-heavy unit carries one so its static-reachability signal is
+ * not trusted as complete (the anti-silent-de-prioritization guard). The flag
+ * NEVER lowers the score; it is advisory provenance.
+ */
+export type ConfidenceFlag = ("dynamic-dispatch" | "re-export-indirection")
+/**
+ * The category of a single weakening signal.
+ */
+export type WeakeningKind = ("test-weakened" | "threshold-lowered" | "suppression-added" | "security-check-removed")
+/**
+ * The exactly-three shippable decision categories (the SOLID-3). No cut category
+ * (abstraction / deletion / convention / irreversibility) is representable: this
+ * enum is the structural guarantee that confirmed-noise categories never ship.
+ */
+export type DecisionCategory = ("coupling-boundary" | "public-api-contract" | "dependency")
 /**
  * Discriminator value for [`CodeClimateIssue::kind`].
  */
@@ -807,7 +855,7 @@ duplication?: (DupesReportPayload | null)
 complexity?: (HealthReport | null)
 /**
  * Read-only follow-up commands computed from this run's findings. See
- * [`CheckOutput::next_steps`] for the contract.
+ * `CheckOutput::next_steps` for the contract.
  */
 next_steps?: NextStep[]
 }
@@ -2882,11 +2930,15 @@ export interface UnrenderedComponentFinding {
  */
 path: string
 /**
- * The component name (the `.vue`/`.svelte` file stem, PascalCase).
+ * The component name. For `"vue"` / `"svelte"` / `"astro"` this is the SFC
+ * file stem (PascalCase); for `"angular"` it is the component class name; for
+ * `"lit"` it is the registered custom-element TAG (e.g. `x-foo`), not a file
+ * stem. Use `path` to anchor the file across all frameworks.
  */
 component_name: string
 /**
- * Which framework this component belongs to: `"vue"` or `"svelte"`.
+ * Which framework this component belongs to: `"vue"`, `"svelte"`, `"astro"`,
+ * `"angular"`, or `"lit"`.
  */
 framework: string
 /**
@@ -3563,7 +3615,7 @@ reason: string
 }
 /**
  * Wire-shape payload for `fallow dupes --format json` (the body that
- * flattens into [`crate::output_envelope::DupesOutput`] and is also
+ * flattens into the `DupesOutput` envelope and is also
  * emitted under the `dupes` / `duplication` key inside the combined and
  * audit envelopes).
  *
@@ -3579,8 +3631,8 @@ export interface DupesReportPayload {
 clone_groups: CloneGroupFinding[]
 /**
  * Clone families, each wrapped with typed actions. Inner `groups`
- * inside each [`CloneFamilyFinding`] are themselves wrapped as
- * [`CloneGroupFinding`] entries carrying their own `actions[]` (and
+ * inside each `CloneFamilyFinding` are themselves wrapped as
+ * `CloneGroupFinding` entries carrying their own `actions[]` (and
  * optional audit-mode `introduced` flag), so JSON-Schema strict
  * consumers and TS consumers reading `clone_families[].groups[]` see
  * the same shape as the top-level `clone_groups[]` array (preserves
@@ -3670,8 +3722,8 @@ end_col: number
 fragment: string
 }
 /**
- * Per-action wire shape attached to each [`CloneGroupFinding`] and
- * [`AttributedCloneGroupFinding`]. Mirrors the action types previously
+ * Per-action wire shape attached to each `CloneGroupFinding` and
+ * `AttributedCloneGroupFinding`. Mirrors the action types previously
  * emitted by `inject_dupes_actions::build_clone_group_actions` in
  * `crates/cli/src/report/json.rs`: `extract-shared` plus `suppress-line`.
  */
@@ -3700,7 +3752,7 @@ comment?: (string | null)
  * Unlike most `*Finding` wrappers this one is NOT `#[serde(flatten)]` over
  * the bare [`CloneFamily`], because the family's nested
  * `groups: Vec<CloneGroup>` field needs to carry the typed
- * [`CloneGroupFinding`] wrapper too (so every nested clone group gets its
+ * `CloneGroupFinding` wrapper too (so every nested clone group gets its
  * own `actions[]` array, matching the legacy post-pass behavior; see issue
  * #393 regression test). The wire shape stays byte-identical to the
  * previous post-pass output. No `introduced` field because `fallow audit`
@@ -3708,7 +3760,7 @@ comment?: (string | null)
  */
 export interface CloneFamilyFinding {
 /**
- * The files involved in this family (sorted for stable output).
+ * The files involved in this family.
  */
 files: string[]
 /**
@@ -3731,7 +3783,7 @@ total_duplicated_tokens: number
 suggestions: RefactoringSuggestion[]
 /**
  * Suggested next steps: an `extract-shared` primary, one
- * `apply-suggestion` per [`RefactoringSuggestion`] on the family, and
+ * `apply-suggestion` per `RefactoringSuggestion` on the family, and
  * a trailing `suppress-line`. Always emitted (possibly empty for
  * forward-compat).
  */
@@ -3752,10 +3804,10 @@ description: string
 estimated_savings: number
 }
 /**
- * Per-action wire shape attached to each [`CloneFamilyFinding`]. Mirrors
+ * Per-action wire shape attached to each `CloneFamilyFinding`. Mirrors
  * the action types previously emitted by
  * `build_clone_family_actions`: `extract-shared`, one `apply-suggestion`
- * per [`RefactoringSuggestion`] on the family, and a trailing
+ * per `RefactoringSuggestion` on the family, and a trailing
  * `suppress-line`.
  */
 export interface CloneFamilyAction {
@@ -3864,7 +3916,7 @@ export interface HealthReport {
 /**
  * Functions and synthetic template entries exceeding complexity
  * thresholds, sorted by the --sort criteria. Each entry wraps its
- * inner [`ComplexityViolation`] payload (flattened on the wire) with
+ * inner `ComplexityViolation` payload (flattened on the wire) with
  * the typed `actions` list and an optional audit-mode `introduced`
  * flag.
  */
@@ -3909,7 +3961,7 @@ prop_drilling_chains?: PropDrillingChainFinding[]
 /**
  * Hotspot entries combining git churn with complexity. Only present when
  * --hotspots is used. Sorted by score descending (highest risk first).
- * Each entry wraps its inner [`HotspotEntry`] payload (flattened on the
+ * Each entry wraps its inner `HotspotEntry` payload (flattened on the
  * wire) with a typed `actions` list.
  */
 hotspots?: HotspotFinding[]
@@ -3934,7 +3986,7 @@ large_functions?: LargeFunctionEntry[]
 /**
  * Ranked refactoring recommendations. Only present when --targets is used.
  * Sorted by efficiency (priority/effort) descending. Each entry wraps
- * its inner [`RefactoringTarget`] payload (flattened on the wire) with
+ * its inner `RefactoringTarget` payload (flattened on the wire) with
  * a typed `actions` list.
  */
 targets?: RefactoringTargetFinding[]
@@ -4141,7 +4193,7 @@ max_crap: number
  * `comment` plus `placement`, and the coverage-leaning actions
  * (`add-tests`, `increase-coverage`) carry only `note`.
  *
- * [`ComplexityViolation`]: ../../fallow-cli/src/health_types/scores.rs
+ * [`ComplexityViolation`]: ../../fallow-output/src/health_scores.rs
  */
 export interface HealthFindingAction {
 type: HealthFindingActionType
@@ -4239,7 +4291,7 @@ cognitive: number
 crap?: (number | null)
 }
 /**
- * Project-wide vital signs , a fixed set of metrics for trend tracking.
+ * Project-wide vital signs: a fixed set of metrics for trend tracking.
  *
  * Metrics are `Option` when the data source was not available in the current run
  * (e.g., `duplication_pct` is `None` unless the duplication pipeline was run,
@@ -4280,7 +4332,7 @@ hotspot_count?: (number | null)
  */
 hotspot_top_pct_count?: (number | null)
 /**
- * Average maintainability index across all scored files (0–100).
+ * Average maintainability index across all scored files (0-100).
  */
 maintainability_avg?: (number | null)
 /**
@@ -4568,7 +4620,7 @@ path: string
 value_export_count: number
 /**
  * Suggested next steps: an `add-tests` primary and a `suppress-file`
- * secondary. Always emitted (possibly empty for forward-compat).
+ * secondary. Always emitted for the current wire contract.
  */
 actions: UntestedFileAction[]
 }
@@ -4582,7 +4634,7 @@ actions: UntestedFileAction[]
  * struct shape; the field that is populated (`note` for `add-tests`,
  * `comment` for `suppress-file`) depends on the `kind`.
  *
- * [`UntestedFile`]: ../../fallow-cli/src/health_types/coverage.rs
+ * [`UntestedFile`]: ../../fallow-output/src/health_coverage_gaps.rs
  */
 export interface UntestedFileAction {
 type: UntestedFileActionType
@@ -4645,7 +4697,7 @@ actions: UntestedExportAction[]
  * `add-test-import` reflects that a test-reachable reference chain, not
  * just any test coverage, is what closes the gap.
  *
- * [`UntestedExport`]: ../../fallow-cli/src/health_types/coverage.rs
+ * [`UntestedExport`]: ../../fallow-output/src/health_coverage_gaps.rs
  */
 export interface UntestedExportAction {
 type: UntestedExportActionType
@@ -4736,7 +4788,7 @@ commits: number
  * `ownership-drift`) are appended only when `--ownership` is active AND
  * the corresponding signal fires for the hotspot.
  *
- * [`HotspotEntry`]: ../../fallow-cli/src/health_types/scores.rs
+ * [`HotspotEntry`]: ../../fallow-output/src/health_scores.rs
  */
 export interface HotspotAction {
 type: HotspotActionType
@@ -4822,6 +4874,27 @@ watermark?: (RuntimeCoverageWatermark | null)
  * Non-fatal merge or coverage diagnostics. Omitted when empty.
  */
 warnings?: RuntimeCoverageMessage[]
+/**
+ * Whether an autonomous agent may act on this report (fallow-rs/fallow-cloud#316,
+ * mirrors the cloud runtime-context contract). `false` when the capture
+ * carries no usable runtime evidence (no tracked functions); then
+ * `actionability_verdict` is `insufficient_evidence` and
+ * `actionability_reason` explains. F4: a non-action floor, never a gate on a
+ * positive verdict.
+ */
+actionable: boolean
+/**
+ * Why the report is non-actionable; `null` when `actionable` is true.
+ */
+actionability_reason?: (string | null)
+/**
+ * First-class non-action verdict (`insufficient_evidence`) when not
+ * actionable; `null` otherwise. Mirrors the cloud runtime-context `verdict`;
+ * named distinctly from the report-context `verdict` above to avoid a
+ * collision.
+ */
+actionability_verdict?: (string | null)
+provenance: RuntimeCoverageProvenance
 }
 /**
  * Summary block mirroring `fallow_cov_protocol::Summary` (0.3 shape).
@@ -4862,7 +4935,7 @@ coverage_percent: number
 trace_count: number
 /**
  * Days of observation covered by the supplied dump (Phase 2 local analysis
- * emits 0 , set by the beacon/cloud in Phase 3+).
+ * emits 0, set by the beacon/cloud in Phase 3+).
  */
 period_days: number
 /**
@@ -4957,6 +5030,13 @@ evidence: RuntimeCoverageEvidence
  * Suggested actions for this finding. Omitted when empty.
  */
 actions?: RuntimeCoverageAction[]
+/**
+ * The discriminator inputs that produced this verdict (#321), emitted so an
+ * agent can reproduce it and see the confidence cap. `None` for findings
+ * not built from the merge pipeline (e.g. baseline round-trips). Omitted
+ * from JSON when absent.
+ */
+discriminators?: (RuntimeCoverageDiscriminators | null)
 }
 /**
  * Supporting evidence for a finding (mirrors `fallow_cov_protocol::Evidence`).
@@ -5009,6 +5089,48 @@ description: string
  */
 auto_fixable: boolean
 }
+/**
+ * Discriminator inputs that PRODUCED a finding's verdict (fallow-rs/fallow-cloud#321),
+ * emitted alongside the verdict so an agent can reproduce it and see the
+ * minimum-observation confidence cap instead of re-deriving them from scratch.
+ * F4: these make the EXISTING Fallow-owned discriminators legible; they are not
+ * a new or external signal and gate nothing. Pairs with `evidence.static_status`
+ * (the static half of the discriminator set).
+ */
+export interface RuntimeCoverageDiscriminators {
+/**
+ * Three-state runtime tracking: `called` (invocations > 0), `never_called`
+ * (V8 tracked it, invocations == 0), or `untracked` (V8 never saw it). The
+ * ONLY signal that can issue a deletion verdict.
+ */
+tracking_state: string
+/**
+ * `invocations / trace_count` for this function; `null` when untracked (no
+ * invocation count). The per-function value behind the low-traffic split.
+ */
+invocation_ratio?: (number | null)
+/**
+ * Active/low_traffic split ratio in effect (CLI default 0.001). A tracked
+ * function whose `invocation_ratio` is below this reads `low_traffic`, else
+ * `active`.
+ */
+low_traffic_threshold: number
+/**
+ * Total observed invocations across all functions (the `invocation_ratio`
+ * denominator), echoed per finding so the verdict is self-contained.
+ */
+trace_count: number
+/**
+ * High-confidence verdict floor (CLI default 5000). When `trace_count` is
+ * below it, confidence is capped regardless of the per-function signal.
+ */
+min_observation_volume: number
+/**
+ * `trace_count >= min_observation_volume`: whether the dump cleared the
+ * confidence floor. `false` means this verdict's confidence is capped.
+ */
+meets_observation_volume: boolean
+}
 export interface RuntimeCoverageHotPath {
 /**
  * Stable content-hash ID of the form `fallow:hot:<hash>`.
@@ -5146,6 +5268,44 @@ code: string
  */
 message: string
 }
+/**
+ * Provenance of a runtime-coverage report (fallow-rs/fallow-cloud#319), mirroring
+ * the cloud runtime-context `provenance` block so the local-capture and cloud
+ * surfaces present one portable shape. F4: provenance is context only; it never
+ * gates a verdict or confidence.
+ */
+export interface RuntimeCoverageProvenance {
+data_source: RuntimeCoverageDataSource
+/**
+ * `true` / `false` / `unknown`. Always `unknown` for a local capture: the
+ * local path has no deployment-origin signal (the cloud may resolve it).
+ */
+is_production: string
+/**
+ * Age in whole days of the most recent evidence; `0` for a fresh local
+ * capture, `null` when no runtime data is present.
+ */
+freshness_days?: (number | null)
+/**
+ * `functions_untracked / (functions_tracked + functions_untracked)`, in
+ * `[0, 1]`. High ratios mark a thin / partial capture.
+ */
+untracked_ratio: number
+/**
+ * Fraction of resolution-attempted functions whose position could not be
+ * mapped to source, in `[0, 1]`. `0` for a local capture (positions resolve
+ * natively or via the sidecar).
+ */
+unresolved_ratio: number
+/**
+ * Whether `freshness_days` exceeds `stale_after_days`.
+ */
+stale: boolean
+/**
+ * The documented staleness cutoff (days), echoed so the rule travels in-band.
+ */
+stale_after_days: number
+}
 /**
  * Combined coverage, runtime, complexity, and change-scope verdicts.
  */
@@ -5417,7 +5577,7 @@ fingerprint: string
  * the target's `evidence.complex_functions` back to the matching
  * `ComplexityViolation` and read placement from THAT action instead.
  *
- * [`RefactoringTarget`]: ../../fallow-cli/src/health_types/targets.rs
+ * [`RefactoringTarget`]: ../../fallow-output/src/health_targets.rs
  */
 export interface RefactoringTargetAction {
 type: RefactoringTargetActionType
@@ -5435,7 +5595,7 @@ description: string
 /**
  * Recommendation category for `apply-refactoring` actions. Mirrors
  * the parent target's
- * [`category`](../../fallow-cli/src/health_types/targets.rs.html)
+ * [`category`](../../fallow-output/src/health_targets.rs.html)
  * field so consumers can route on the action alone.
  */
 category?: (string | null)
@@ -5519,11 +5679,11 @@ snapshot_schema_version?: (number | null)
  */
 export interface TrendMetric {
 /**
- * Metric identifier (e.g., `"score"`, `"dead_file_pct"`).
+ * Metric identifier, e.g. `"score"` or `"dead_file_pct"`.
  */
 name: string
 /**
- * Human-readable label (e.g., `"Health Score"`, `"Dead Files"`).
+ * Human-readable label, e.g. `"Health Score"` or `"Dead Files"`.
  */
 label: string
 /**
@@ -5535,12 +5695,12 @@ previous: number
  */
 current: number
 /**
- * Absolute change (current − previous).
+ * Absolute change (current - previous).
  */
 delta: number
 direction: TrendDirection
 /**
- * Unit for display (e.g., `"%"`, `""`, `"pts"`).
+ * Unit for display, e.g. `"%"`, `""`, or `"pts"`.
  */
 unit: string
 /**
@@ -5557,11 +5717,11 @@ current_count?: (TrendCount | null)
  */
 export interface TrendCount {
 /**
- * The numerator (e.g., dead files count).
+ * The numerator, e.g. dead files count.
  */
 value: number
 /**
- * The denominator (e.g., total files).
+ * The denominator, e.g. total files.
  */
 total: number
 }
@@ -5569,10 +5729,10 @@ total: number
  * Auditable breadcrumb recording when health-finding `suppress-line`
  * action hints were omitted from the report.
  *
- * Set at construction time on [`HealthReport::actions_meta`] (and on
- * each [`HealthGroup::actions_meta`](crate::health_types::HealthGroup)
+ * Set at construction time on `HealthReport::actions_meta` (and on
+ * each `HealthGroup::actions_meta`
  * when grouped) by the report builder, derived from the active
- * [`HealthActionContext`]. Lets consumers see "where did the
+ * `HealthActionContext`. Lets consumers see "where did the
  * suppress-line hints go?" without having to grep the config or CLI
  * history.
  *
@@ -5584,8 +5744,8 @@ total: number
  */
 export interface HealthActionsMeta {
 /**
- * Always `true` when the breadcrumb is emitted. Absent from the wire
- * when no suppression occurred.
+ * Always `true` when the breadcrumb is emitted. Absent from the wire when
+ * no suppression occurred.
  */
 suppression_hints_omitted: boolean
 /**
@@ -6453,6 +6613,14 @@ dead_code: InspectEvidenceSection
 duplication: InspectEvidenceSection
 complexity: InspectEvidenceSection
 security: InspectEvidenceSection
+impact_closure: InspectEvidenceSection
+/**
+ * OPT-IN symbol-level call chain. Present only when `--symbol-chain` was
+ * requested AND the target is a SYMBOL (best-effort, syntactic, OFF the
+ * ranked path). `None` (omitted) by default: symbol-level chains are
+ * best-effort and not part of the trusted ranked evidence.
+ */
+symbol_chain?: (InspectEvidenceSection | null)
 }
 export interface InspectEvidenceSection {
 status: InspectSectionStatus
@@ -6592,10 +6760,9 @@ _meta?: (Meta | null)
 }
 /**
  * Envelope emitted by `fallow list --boundaries --format json`. Surfaces
- * the architecture boundary zones, rules, and (issue #373) the user's
- * pre-expansion `autoDiscover` logical groups so consumers can render
- * grouping intent that `expand_auto_discover` would otherwise flatten out
- * of `zones[]`.
+ * the architecture boundary zones, rules, and the user's pre-expansion
+ * `autoDiscover` logical groups so consumers can render grouping intent that
+ * expansion would otherwise flatten out of `zones[]`.
  */
 export interface ListBoundariesOutput {
 boundaries: BoundariesListing
@@ -6632,10 +6799,10 @@ from: string
 allow: string[]
 }
 /**
- * A pre-expansion `autoDiscover` logical group surfaced for observability
- * (issue #373). Captured during `expand_auto_discover` so consumers can
- * see the user-authored parent name and grouping intent after expansion
- * would otherwise flatten it out of [`BoundariesListing::zones`].
+ * A pre-expansion `autoDiscover` logical group surfaced for observability.
+ * Captured during expansion so consumers can see the user-authored parent
+ * name and grouping intent after expansion would otherwise flatten it out of
+ * [`BoundariesListing::zones`].
  */
 export interface BoundariesListLogicalGroup {
 name: string
@@ -6723,7 +6890,7 @@ elapsed_ms: ElapsedMs
 /**
  * Functions and synthetic template entries exceeding complexity
  * thresholds, sorted by the --sort criteria. Each entry wraps its
- * inner [`ComplexityViolation`] payload (flattened on the wire) with
+ * inner `ComplexityViolation` payload (flattened on the wire) with
  * the typed `actions` list and an optional audit-mode `introduced`
  * flag.
  */
@@ -6768,7 +6935,7 @@ prop_drilling_chains?: PropDrillingChainFinding[]
 /**
  * Hotspot entries combining git churn with complexity. Only present when
  * --hotspots is used. Sorted by score descending (highest risk first).
- * Each entry wraps its inner [`HotspotEntry`] payload (flattened on the
+ * Each entry wraps its inner `HotspotEntry` payload (flattened on the
  * wire) with a typed `actions` list.
  */
 hotspots?: HotspotFinding[]
@@ -6793,7 +6960,7 @@ large_functions?: LargeFunctionEntry[]
 /**
  * Ranked refactoring recommendations. Only present when --targets is used.
  * Sorted by efficiency (priority/effort) descending. Each entry wraps
- * its inner [`RefactoringTarget`] payload (flattened on the wire) with
+ * its inner `RefactoringTarget` payload (flattened on the wire) with
  * a typed `actions` list.
  */
 targets?: RefactoringTargetFinding[]
@@ -6830,7 +6997,7 @@ _meta?: (Meta | null)
 workspace_diagnostics?: WorkspaceDiagnostic[]
 /**
  * Read-only follow-up commands computed from this run's findings. See
- * [`CheckOutput::next_steps`] for the contract.
+ * `CheckOutput::next_steps` for the contract.
  */
 next_steps?: NextStep[]
 }
@@ -6845,7 +7012,7 @@ next_steps?: NextStep[]
  * files in the group, so they answer "what is the health of workspace X" in
  * a single invocation. `files_analyzed` and `functions_above_threshold`
  * summarise the subset for parity with the project-level
- * [`crate::health_types::HealthSummary`].
+ * project-level health summary.
  */
 export interface HealthGroup {
 /**
@@ -6892,7 +7059,7 @@ health_score?: (HealthScore | null)
 /**
  * Findings restricted to files in this group. Each entry is the typed
  * [`HealthFinding`] wrapper around a
- * [`ComplexityViolation`](crate::health_types::ComplexityViolation)
+ * `ComplexityViolation`
  * payload.
  */
 findings?: HealthFinding[]
@@ -6903,7 +7070,7 @@ file_scores?: FileHealthScore[]
 /**
  * Hotspots restricted to files in this group. Each entry is the typed
  * [`HotspotFinding`] wrapper around a
- * [`HotspotEntry`](crate::health_types::HotspotEntry) payload.
+ * `HotspotEntry` payload.
  */
 hotspots?: HotspotFinding[]
 /**
@@ -6913,7 +7080,7 @@ large_functions?: LargeFunctionEntry[]
 /**
  * Refactoring targets in files belonging to this group. Each entry is
  * the typed [`RefactoringTargetFinding`] wrapper around a
- * [`RefactoringTarget`](crate::health_types::RefactoringTarget)
+ * `RefactoringTarget`
  * payload.
  */
 targets?: RefactoringTargetFinding[]
@@ -6921,21 +7088,17 @@ targets?: RefactoringTargetFinding[]
  * Auditable breadcrumb recording why `suppress-line` action hints
  * were omitted from this group's findings. Mirrors the project-level
  * `HealthReport.actions_meta`; populated at construction time when the
- * per-group [`HealthActionContext`](crate::health_types::HealthActionContext)
+ * per-group `HealthActionContext`
  * suppresses inline hints.
  */
 actions_meta?: (HealthActionsMeta | null)
 }
 /**
- * Wire-shape payload for `fallow dupes --format json` (the body that
- * flattens into [`crate::output_envelope::DupesOutput`] and is also
- * emitted under the `dupes` / `duplication` key inside the combined and
- * audit envelopes).
+ * Envelope emitted by `fallow dupes --format json`.
  *
- * Mirrors [`DuplicationReport`] field-for-field, except `clone_groups`
- * and `clone_families` carry the typed wrapper envelopes instead of bare
- * findings, so the schema (and any TS / agent consumer) sees the typed
- * `actions[]` natively.
+ * `Report` and `Group` are generic so the envelope can live in
+ * `fallow-output` while duplication report wrappers and grouped output
+ * internals continue to migrate out of CLI/API-specific crates.
  */
 export interface DupesOutput {
 schema_version: SchemaVersion
@@ -6947,8 +7110,8 @@ elapsed_ms: ElapsedMs
 clone_groups: CloneGroupFinding[]
 /**
  * Clone families, each wrapped with typed actions. Inner `groups`
- * inside each [`CloneFamilyFinding`] are themselves wrapped as
- * [`CloneGroupFinding`] entries carrying their own `actions[]` (and
+ * inside each `CloneFamilyFinding` are themselves wrapped as
+ * `CloneGroupFinding` entries carrying their own `actions[]` (and
  * optional audit-mode `introduced` flag), so JSON-Schema strict
  * consumers and TS consumers reading `clone_families[].groups[]` see
  * the same shape as the top-level `clone_groups[]` array (preserves
@@ -6970,7 +7133,7 @@ groups?: (DuplicationGroup[] | null)
 _meta?: (Meta | null)
 /**
  * Workspace-discovery diagnostics surfaced during config load
- * (issue #473). See [`CheckOutput::workspace_diagnostics`] for the full
+ * (issue #473). See `CheckOutput::workspace_diagnostics` for the full
  * contract; the same list is repeated on each top-level command's
  * envelope so single-command consumers see it without having to look at
  * a separate top-level field.
@@ -6978,7 +7141,7 @@ _meta?: (Meta | null)
 workspace_diagnostics?: WorkspaceDiagnostic[]
 /**
  * Read-only follow-up commands computed from this run's findings. See
- * [`CheckOutput::next_steps`] for the contract.
+ * `CheckOutput::next_steps` for the contract.
  */
 next_steps?: NextStep[]
 }
@@ -7011,7 +7174,7 @@ clone_families: CloneFamilyFinding[]
  * Wire-shape envelope for an [`AttributedCloneGroup`] finding (per-bucket
  * duplication attribution emitted under `fallow dupes --group-by`).
  * Flattens the attributed group and carries the same typed
- * `CloneGroupAction` array as [`CloneGroupFinding`]; no `introduced`
+ * `CloneGroupAction` array as `CloneGroupFinding`; no `introduced`
  * field because `fallow audit` does not run on grouped output.
  */
 export interface AttributedCloneGroupFinding {
@@ -7020,7 +7183,13 @@ export interface AttributedCloneGroupFinding {
  * this clone group. Ties broken alphabetically (smallest key wins).
  */
 primary_owner: string
+/**
+ * Number of tokens in the clone group.
+ */
 token_count: number
+/**
+ * Number of source lines in the clone group.
+ */
 line_count: number
 /**
  * Each instance carries its own `owner` field alongside the standard
@@ -7430,7 +7599,7 @@ thin_wrappers?: ThinWrapperFinding[]
 duplicate_prop_shapes?: DuplicatePropShapeFinding[]
 }
 /**
- * The rendered impact report, derived purely from the store (no analysis run).
+ * The rendered impact report, derived purely from the store.
  */
 export interface ImpactReport {
 schema_version: ImpactReportSchemaVersion
@@ -7526,18 +7695,24 @@ duplication: number
 export interface TrendSummary {
 direction: ImpactTrendDirection
 /**
- * Signed delta in total issues (current minus previous).
+ * Signed delta in total issues, current minus previous.
  */
 total_delta: number
 previous_total: number
 current_total: number
 }
+/**
+ * A commit-gate containment event recorded by `fallow impact`.
+ */
 export interface ContainmentEvent {
 blocked_at: string
 cleared_at: string
 git_sha?: (string | null)
 blocked_counts: ImpactCounts
 }
+/**
+ * A resolved or suppressed finding attribution event.
+ */
 export interface ResolutionEvent {
 kind: string
 path: string
@@ -7546,7 +7721,7 @@ git_sha?: (string | null)
 timestamp: string
 }
 /**
- * The cross-repo aggregate report (`fallow impact --all --format json`).
+ * The cross-repo aggregate report, `fallow impact --all --format json`.
  */
 export interface CrossRepoImpactReport {
 schema_version: CrossRepoImpactSchemaVersion
@@ -8179,17 +8354,8 @@ top_files_limit: number
  * One sampled unresolved-callee row.
  */
 export interface SecurityUnresolvedCalleeSample {
-/**
- * Project-relative source path.
- */
 path: string
-/**
- * 1-based source line.
- */
 line: number
-/**
- * 0-based byte column.
- */
 col: number
 reason: SkippedSecurityCalleeReason
 expression_kind: SkippedSecurityCalleeExpressionKind
@@ -8198,9 +8364,6 @@ expression_kind: SkippedSecurityCalleeExpressionKind
  * Count of unresolved callees in one file.
  */
 export interface SecurityUnresolvedCalleeTopFile {
-/**
- * Project-relative source path.
- */
 path: string
 /**
  * Number of unresolved callees in this file.
@@ -8341,13 +8504,7 @@ export interface SecuritySurvivor {
  */
 finding_id: string
 verdict: SecurityVerifierVerdictStatus
-/**
- * Short verifier reason.
- */
 reason?: (string | null)
-/**
- * Short verifier rationale.
- */
 rationale?: (string | null)
 /**
  * Optional verifier-provided confidence or review priority.
@@ -8407,9 +8564,6 @@ suggestion: string
  * One file inside a blind-spot group.
  */
 export interface SecurityBlindSpotFile {
-/**
- * Project-relative source path.
- */
 path: string
 /**
  * Count in the bounded diagnostic sample.
@@ -8429,16 +8583,672 @@ dupes?: (DupesReportPayload | null)
 health?: (HealthReport | null)
 /**
  * Read-only follow-up commands aggregated across the combined run's
- * findings. See [`CheckOutput::next_steps`] for the contract.
+ * findings. See `CheckOutput::next_steps` for the contract.
  */
 next_steps?: NextStep[]
 }
+/**
+ * Optional `_meta` block for [`CombinedOutput`].
+ */
 export interface CombinedMeta {
 check?: (Meta | null)
 dupes?: (Meta | null)
 health?: (Meta | null)
 telemetry?: (TelemetryMeta | null)
 }
+/**
+ * The full `fallow audit --brief --format json` envelope. Carries the
+ * informational verdict, the triage and graph-facts orientation stages, plus
+ * the reused "subtract" section (the same dead-code / duplication / complexity
+ * payload `fallow audit --format json` emits).
+ */
+export interface ReviewBriefOutput {
+schema_version: ReviewBriefSchemaVersion
+/**
+ * Fallow CLI version that produced this output.
+ */
+version: string
+/**
+ * Command discriminator singleton: always `"audit-brief"`.
+ */
+command: string
+triage: DiffTriage
+graph_facts: GraphFacts
+partition: PartitionFacts
+impact_closure: ImpactClosureFacts
+focus: FocusMap
+deltas: ReviewDeltas
+/**
+ * 6.F, headline: reviewer-private weakening signals (tests
+ * removed/skipped, thresholds lowered, suppressions added, security steps
+ * removed). Advisory, never gates, never auto-posted.
+ */
+weakening: WeakeningSignal[]
+routing: RoutingFacts
+decisions: DecisionSurface
+}
+/**
+ * Stage 0 of the brief: triage facts derived purely from the diff size.
+ *
+ * `hunks` and `net_lines` are `None` in v1: the file-level audit does not yet
+ * thread a `DiffIndex` (from `report/ci/diff_filter.rs`). They populate later,
+ * on `--diff-file` / `--diff-stdin`, without a schema bump.
+ */
+export interface DiffTriage {
+/**
+ * Number of changed files in the audit scope.
+ */
+files: number
+/**
+ * Number of diff hunks. `None` in v1 (no diff index threaded yet).
+ */
+hunks?: (number | null)
+/**
+ * Net added-minus-removed lines. `None` in v1 (no diff index threaded yet).
+ */
+net_lines?: (number | null)
+risk_class: RiskClass
+review_effort: ReviewEffort
+}
+/**
+ * Stage 1 of the brief: graph-derived orientation facts.
+ *
+ * `boundaries_touched` is derived from the run's boundary-violation zones;
+ * `reachable_from` is populated by the impact closure (the affected-not-shown
+ * set: modules the changed code is reachable from / affects, none in the diff).
+ * `exports_added` / `api_width_delta` stay honestly stubbed (`0`) until the
+ * export-surface delta lands. The fields are present and correctly typed so
+ * values fill in later without a schema bump.
+ */
+export interface GraphFacts {
+/**
+ * Number of exports added by the changeset. Stubbed to `0` in v1.
+ */
+exports_added: number
+/**
+ * Change in public API width (added minus removed exports). Stubbed to `0`
+ * in v1.
+ */
+api_width_delta: number
+/**
+ * Root-relative paths of modules the changed code is reachable from / affects
+ * (the impact closure's affected-but-not-in-diff set), deduped and sorted.
+ * Empty when no graph was retained or nothing depends on the changed files.
+ */
+reachable_from: string[]
+/**
+ * Architecture boundary zones touched by the changeset, deduped and sorted.
+ * Derived from the run's boundary-violation findings.
+ */
+boundaries_touched: string[]
+}
+/**
+ * Stage 2 of the brief: the partition + order. The changed files split into
+ * coherent BY-MODULE units (the only byte-identical-deterministic clustering
+ * definition straight from the graph), plus a dependency-sensible review ORDER
+ * over those units (definitions before consumers, mechanical/leaf units last,
+ * ties broken by the path sort). Stage 2 sits UNDER the decision surface as a
+ * drill-down; it is the backbone the directed-review loop hands the agent.
+ *
+ * Feature-cluster and concern partitioning are deferred (they need scoring
+ * heuristics whose tie-breaks are a fresh nondeterminism surface).
+ */
+export interface PartitionFacts {
+/**
+ * The by-module units, sorted by module directory. Empty when no graph was
+ * retained or no changed file maps to a known module.
+ */
+units: ReviewUnitFact[]
+/**
+ * The dependency-sensible review order: module-directory strings,
+ * definitions before consumers, mechanical/leaf units last. A permutation of
+ * the `units` module directories.
+ */
+order: string[]
+}
+/**
+ * One review unit: a coherent by-module cluster of the changed set.
+ */
+export interface ReviewUnitFact {
+/**
+ * The module directory the unit covers (root-relative, forward-slashed).
+ * The empty string is the repository-root group.
+ */
+module_dir: string
+/**
+ * The changed files in this unit, path-sorted.
+ */
+files: string[]
+}
+/**
+ * Stage 3 of the brief: the impact closure. The transitive
+ * affected-but-not-in-diff set plus the coordination gap. The differentiator a
+ * diff tool fundamentally cannot do, because it has no graph.
+ *
+ * Honest scope (ADR-001, syntactic): the coordination gap is an attention
+ * pointer at the exact inter-module failure mode, NOT a correctness proof.
+ */
+export interface ImpactClosureFacts {
+/**
+ * Root-relative paths transitively affected by the changeset (reverse-deps +
+ * re-export chains) that are NOT in the diff, deduped and sorted.
+ */
+affected_not_shown: string[]
+/**
+ * Coordination gaps: a changed file exports a contract consumed by a module
+ * absent from the diff. One entry per (changed file, consumer) pair.
+ */
+coordination_gap: CoordinationGapFact[]
+}
+/**
+ * One coordination-gap entry: a changed file exports symbols consumed by a
+ * `consumer_file` that is NOT in the diff. Deduped per (changed, consumer) pair
+ * (firing-precision rule R2).
+ */
+export interface CoordinationGapFact {
+/**
+ * Root-relative path of the changed file whose contract is consumed elsewhere.
+ */
+changed_file: string
+/**
+ * Root-relative path of the consumer module that is NOT in the diff.
+ */
+consumer_file: string
+/**
+ * The exported symbol names the consumer references, sorted.
+ */
+consumed_symbols: string[]
+/**
+ * Honest scope note: this is a syntactic attention pointer, not a proof.
+ */
+note: string
+}
+/**
+ * The weighted focus map: the ranked `review-here` units plus the FULL
+ * `deprioritized` escape-hatch list, so nothing is hidden.
+ *
+ * Completeness invariant (the escape-hatch done-condition): the two lists
+ * partition the unit set, so `review_here.len() + deprioritized.len()` equals
+ * the total unit count by construction.
+ */
+export interface FocusMap {
+/**
+ * Units labeled `review-here`, ranked by composite score (descending), ties
+ * broken by path for determinism.
+ */
+review_here: FocusUnit[]
+/**
+ * EVERY `not-prioritized` unit (the escape hatch). Always present and fully
+ * enumerated so a reviewer can always "show me what you de-prioritized"; the
+ * human brief collapses it by default and re-expands under
+ * `--show-deprioritized`.
+ */
+deprioritized: FocusUnit[]
+}
+/**
+ * One review unit on the focus map: its file, composite score, label, human
+ * reason, and any confidence flags.
+ */
+export interface FocusUnit {
+/**
+ * Root-relative path of the changed file this unit covers.
+ */
+file: string
+score: FocusScore
+label: FocusLabel
+/**
+ * A human-readable reason for the label, built from the present signals.
+ */
+reason: string
+/**
+ * Confidence flags (advisory; never lower the score). Sorted, deduped.
+ */
+confidence?: ConfidenceFlag[]
+}
+/**
+ * The composite attention score, with the four deterministic component
+ * sub-scores kept on the wire so the runtime seam can re-weight `total`
+ * without recomputing the signals.
+ */
+export interface FocusScore {
+/**
+ * Fan-in/out blast-radius component.
+ */
+fan_io: number
+/**
+ * Security source -> sink taint-touch component (0 until a security pass is
+ * threaded onto the brief path; the seam is built and tested).
+ */
+security_taint: number
+/**
+ * Risk-zone component (boundary / public-API / security-sensitive).
+ */
+risk_zone: number
+/**
+ * Change-shape component (new/widened export, signature change proxy).
+ */
+change_shape: number
+/**
+ * The summed total. The paid runtime layer multiplies a runtime hot/cold weight in here.
+ */
+total: number
+}
+/**
+ * Diff-aware deterministic deltas (6.A), framed new-vs-pre-existing against
+ * the audit base snapshot. Each entry is a brief summary/verdict line.
+ *
+ * `public_api` is batch-consolidated to ONE decision per change (rule R1):
+ * the `added` list carries the introduced public-export keys as evidence, but a
+ * reviewer reads "the public surface widened by N", never one decision per
+ * symbol.
+ */
+export interface ReviewDeltas {
+/**
+ * Cross-zone boundary EDGES introduced vs base (R2 first-edge-only: one per
+ * `<from_zone>-><to_zone>` pair, never per import). New-vs-pre-existing.
+ */
+boundary_introduced: string[]
+/**
+ * Circular dependencies introduced vs base (canonical file-set keys).
+ */
+cycle_introduced: string[]
+/**
+ * Exports-aware public-API surface delta: the public-export keys
+ * (`<rel_path>::<name>`) added vs base, resolved through `package.json`
+ * `exports` + re-export reachability. A symbol re-exported only through an
+ * internal barrel NOT in `exports` is absent here (zero delta); one
+ * reachable through an `exports` path is present (exactly one).
+ */
+public_api_added: string[]
+}
+/**
+ * One weakening signal: a category, the file it was detected in, and a short
+ * human-readable evidence string. Reviewer-private; never gates.
+ */
+export interface WeakeningSignal {
+kind: WeakeningKind
+/**
+ * Root-relative path of the changed file the signal was detected in.
+ */
+file: string
+/**
+ * Short evidence string (e.g. the offending token or the threshold delta).
+ */
+evidence: string
+}
+/**
+ * The full routing section: one unit per changed source file with a routable
+ * signal. Files with no ownership signal are omitted (no noise).
+ */
+export interface RoutingFacts {
+/**
+ * Per-changed-file routing units, sorted by file path.
+ */
+units: RoutingUnit[]
+}
+/**
+ * One routed unit with its experts and bus-factor flag.
+ */
+export interface RoutingUnit {
+/**
+ * Root-relative path of the changed file.
+ */
+file: string
+/**
+ * The routed expert(s): the CODEOWNERS declared owner when present, else the
+ * top git-blame / recency contributor; empty when no signal is available.
+ */
+expert: string[]
+/**
+ * Whether the only qualified owner is a single contributor (bus-factor-1):
+ * a knowledge-concentration risk worth a second reviewer.
+ */
+bus_factor_one?: boolean
+}
+/**
+ * The ranked, capped decision surface plus the set of signal_ids the
+ * deterministic layer emitted (the anti-hallucination allowlist).
+ */
+export interface DecisionSurface {
+/**
+ * Ranked decisions, highest consequence first.
+ */
+decisions: Decision[]
+/**
+ * Present when more than the cap were extracted.
+ */
+truncated?: (TruncationNote | null)
+/**
+ * Every signal_id the deterministic layer emitted, INCLUDING those whose
+ * decision was collapsed below the cap or suppressed. The anti-hallucination
+ * allowlist: an agent decision whose id is absent is rejected.
+ */
+emitted_signal_ids: string[]
+}
+/**
+ * One consequential structural decision, framed as a judgment question for a
+ * human with taste, anchored to a fallow-emitted signal.
+ */
+export interface Decision {
+/**
+ * Deterministic anchor to the fallow-emitted candidate this decision frames.
+ * `accept_signal_id` rejects any id not in the emitted set.
+ */
+signal_id: string
+category: DecisionCategory
+/**
+ * The decision framed as a judgment question for the human.
+ */
+question: string
+/**
+ * Root-relative file the decision is anchored at.
+ */
+anchor_file: string
+/**
+ * 1-based anchor line, when the underlying signal carries one (0 = file head).
+ */
+anchor_line: number
+/**
+ * The raw fallow-emitted candidate key the `signal_id` hashes.
+ */
+signal_key: string
+/**
+ * The `signal_id` this decision WOULD have had before any rename in this
+ * change (the anchor file's pre-rename path). Present only when the anchor was
+ * renamed. A review-memory layer carries a dismissal across a `git mv`: if
+ * `previous_signal_id` was dismissed in an earlier PR, treat this decision as
+ * dismissed too. Keeps `signal_id` itself exact + deterministic.
+ */
+previous_signal_id?: (string | null)
+/**
+ * Blast radius: count of modules affected beyond the diff by this decision.
+ */
+blast: number
+/**
+ * `blast * reversibility_weight`: the rank key (sorted descending).
+ */
+consequence: number
+/**
+ * The routed expert(s) to ask, from ownership routing. Empty when no
+ * ownership signal is available for the anchor file.
+ */
+expert: string[]
+/**
+ * Whether the anchor file's only qualified owner is one person.
+ */
+bus_factor_one?: boolean
+/**
+ * Honest per-decision count: in-repo modules OUTSIDE the diff that already
+ * depend on this decision's anchor. This is the DISPLAY number (taste
+ * ownership: the human reads reversibility from the count itself), distinct
+ * from `blast` (the project-wide proxy used only for ranking). Never a door
+ * label. Internal-only by construction, so it cannot see a published library's
+ * external consumers; the public-API trade-off clause names that risk in prose.
+ */
+internal_consumer_count: number
+/**
+ * The named structural sacrifice this change makes, stated as a fact, never a
+ * recommendation (e.g. "Couples `app` to `infra`; 4 in-repo modules already
+ * depend on this anchor."). A sibling fact to `question`; it never tells the
+ * human what to choose.
+ */
+tradeoff: string
+}
+/**
+ * A note for decisions collapsed below the cap.
+ */
+export interface TruncationNote {
+/**
+ * How many decisions were collapsed below the cap.
+ */
+collapsed: number
+/**
+ * Human-readable collapse reason.
+ */
+reason: string
+}
+/**
+ * The `fallow review --walkthrough-guide` envelope: the current digest + schema
+ * the agent fetches. The tool owns this; the skill stays thin (it fetches this
+ * rather than embedding a frozen copy). Always emitted with exit 0.
+ */
+export interface WalkthroughGuide {
+schema_version: ReviewBriefSchemaVersion
+/**
+ * Fallow CLI version that produced this guide.
+ */
+version: string
+/**
+ * Command discriminator singleton: always `"review-walkthrough-guide"`.
+ */
+command: string
+/**
+ * The deterministic graph-snapshot hash pinned into the digest. The agent
+ * echoes it back; a mismatch on reentry refuses the payload as stale.
+ */
+graph_snapshot_hash: string
+digest: ReviewBriefOutput
+direction: ReviewDirection
+/**
+ * The per-hunk change anchors: one stable id per changed region. An agent
+ * may cite a `change_anchor` as a judgment anchor in addition to an emitted
+ * `signal_id`, so a trade-off about a changed region with no graph finding
+ * can still anchor (and be post-validated) rather than hallucinate.
+ */
+change_anchors: ChangeAnchor[]
+agent_schema: AgentSchema
+/**
+ * The injection-resistance note (digest is graph-only; PR prose untrusted).
+ */
+injection_note: string
+}
+/**
+ * The review direction artifact: the order to review in, the coherent units,
+ * and per-unit concern lens + out-of-diff + expert. A minimal projection of the
+ * EXISTING graph facts (routing units + impact closure); the full weighted-focus
+ * engine is a later epic. Graph-derived only (injection-resistant).
+ */
+export interface ReviewDirection {
+/**
+ * The dependency-sensible review order: unit file paths, units carrying
+ * out-of-diff consumers first (review the load-bearing definitions before
+ * the mechanical units).
+ */
+order: string[]
+/**
+ * Coherent review units, in `order`.
+ */
+units: DirectionUnit[]
+}
+/**
+ * One directed review unit projected from the graph: a file the change touches,
+ * the concern to check, the out-of-diff consumers it must account for, and the
+ * routed expert. Graph-derived only (routing + impact closure), NEVER from prose.
+ */
+export interface DirectionUnit {
+/**
+ * Root-relative path of the unit to review.
+ */
+file: string
+/**
+ * The concern lens the agent should check for this unit, derived from the
+ * unit's risk signals (impact-closure consumers vs a plain touched file).
+ */
+concern_lens: string
+/**
+ * Per-unit review-effort budget: the weighted-focus composite score for
+ * this file. A cloud fan-out spends AI passes/verifiers PROPORTIONAL to this
+ * (higher = review harder); a local single-agent loop can ignore it.
+ */
+scoring_budget: number
+/**
+ * Root-relative paths of modules affected by this unit but NOT in the diff
+ * (the out-of-diff context the agent must reason about).
+ */
+out_of_diff: string[]
+/**
+ * Routed expert(s), when ownership signals are available.
+ */
+expert: string[]
+}
+/**
+ * One stable per-hunk CHANGE ANCHOR: a changed region the agent may cite as a
+ * judgment anchor IN ADDITION to a `signal_id`. Where a `signal_id` anchors a
+ * graph FINDING ("fallow emitted this exact finding"), a change_anchor anchors
+ * only a changed REGION ("fallow confirms this region changed") , a strictly
+ * weaker guarantee, surfaced as `anchor_kind` on the accepted judgment so a
+ * consumer can tell the two apart. Graph/diff-derived; NEVER from prose.
+ */
+export interface ChangeAnchor {
+/**
+ * Stable, CONTENT-addressed id: `chg:<16-hex>` over the file path + the
+ * normalized added text (line numbers are NOT hashed, so an edit above the
+ * hunk or a whitespace-only change does not move the id).
+ */
+change_anchor: string
+/**
+ * Root-relative path of the changed file.
+ */
+file: string
+/**
+ * 1-based first line of the hunk in the head file (display/deep-link only;
+ * NOT part of the id).
+ */
+start_line: number
+/**
+ * Number of added lines in the hunk (display only; NOT part of the id).
+ */
+line_count: number
+/**
+ * Rename-durable anchor: the id this same hunk would have had under the
+ * pre-rename path. `None` unless the file was renamed in this change, so an
+ * agent that cited the anchor before a `git mv` still resolves.
+ */
+previous_change_anchor?: (string | null)
+}
+/**
+ * The shape the agent must return, embedded in the guide so a thin skill needs
+ * no frozen copy. Documents the anchoring + staleness contract in the wire.
+ */
+export interface AgentSchema {
+/**
+ * How the agent must structure each judgment: cite an emitted `signal_id`,
+ * add free-text `framing` (non-deterministic, fenced), an optional `concern`.
+ */
+judgment_shape: string
+/**
+ * The agent MUST echo this `graph_snapshot_hash` back in its JSON; a
+ * mismatch on reentry REFUSES the payload as stale.
+ */
+echo_field: string
+/**
+ * The anchoring rule name.
+ */
+anchoring_rule: string
+}
+/**
+ * The `fallow review --walkthrough-file` validation envelope: the result of
+ * post-validating the agent's judgment against the live graph. Always exit 0.
+ */
+export interface WalkthroughValidation {
+schema_version: ReviewBriefSchemaVersion
+/**
+ * Fallow CLI version that produced this validation.
+ */
+version: string
+/**
+ * Command discriminator singleton: always `"review-walkthrough-validation"`.
+ */
+command: string
+/**
+ * The current run's deterministic graph-snapshot hash.
+ */
+graph_snapshot_hash: string
+/**
+ * `true` when the agent's echoed hash != the current hash (the tree moved):
+ * the WHOLE payload is refused, `accepted` is empty.
+ */
+stale: boolean
+/**
+ * Judgments that cite a real fallow-emitted signal, framing fenced.
+ */
+accepted: AcceptedJudgment[]
+/**
+ * Judgments rejected (unanchored signal id, or all-rejected when stale).
+ */
+rejected: RejectedJudgment[]
+/**
+ * Count of accepted judgments.
+ */
+accepted_count: number
+/**
+ * Count of rejected judgments.
+ */
+rejected_count: number
+/**
+ * Count of accepted judgments whose `signal_id` resolved against the live
+ * allowlist. Zero unanchored when this equals `accepted_count` and there are
+ * no rejections (the clean done-condition).
+ */
+unanchored_count: number
+}
+/**
+ * One accepted judgment: the real anchored signal passed through with the
+ * agent's framing FENCED as non-deterministic.
+ */
+export interface AcceptedJudgment {
+/**
+ * The fallow-emitted `signal_id` (verified against the allowlist). Empty
+ * when this judgment was anchored by a `change_anchor` instead.
+ */
+signal_id: string
+/**
+ * The fallow-emitted `change_anchor` (verified against the allowlist). Empty
+ * when this judgment was anchored by a `signal_id`.
+ */
+change_anchor: string
+/**
+ * Which anchor resolved: `"signal"` (a graph FINDING, the strong anchor) or
+ * `"change"` (a changed REGION only, the weaker anchor). Lets a consumer
+ * distinguish a finding-anchored judgment from a region-anchored one rather
+ * than collapsing both into one accepted bucket.
+ */
+anchor_kind: string
+/**
+ * The agent's fenced free-text framing.
+ */
+agent_framing: string
+/**
+ * The agent's optional concern category.
+ */
+concern?: (string | null)
+/**
+ * Hard fence: always `false`. The framing is agent prose, never a
+ * deterministic fallow result, so it never gates or auto-posts.
+ */
+deterministic: boolean
+}
+/**
+ * One rejected judgment plus the reason it was rejected.
+ */
+export interface RejectedJudgment {
+/**
+ * The `signal_id` the agent cited (fallow never emitted it). Empty when the
+ * judgment cited a `change_anchor` instead.
+ */
+signal_id: string
+/**
+ * The `change_anchor` the agent cited (fallow never emitted it). Empty when
+ * the judgment cited a `signal_id` instead.
+ */
+change_anchor: string
+/**
+ * The rejection reason: `unanchored-signal-id` (cited a signal fallow did
+ * not emit), `unknown-change-anchor` (cited a region fallow did not emit),
+ * or `stale-snapshot` (the tree moved).
+ */
+reason: string
+}
 /**
  * Single CodeClimate-compatible issue inside [`CodeClimateOutput`].
  */
@@ -8450,6 +9260,15 @@ categories: string[]
 severity: CodeClimateSeverity
 fingerprint: string
 location: CodeClimateLocation
+/**
+ * Optional owner attribution used by grouped dead-code output.
+ */
+owner?: (string | null)
+/**
+ * Optional grouping attribution used by grouped health and duplication
+ * output.
+ */
+group?: (string | null)
 }
 /**
  * Location block inside [`CodeClimateIssue::location`].