openlore 2.0.7 → 2.0.8

package/dist/core/decisions/verifier.js

@@ -72,6 +72,41 @@ function buildTargetedDiff(decision, diffByFile, fallbackDiff) {
     // No matching files — pass a slice of the global diff so the LLM can still check
     return fallbackDiff.slice(0, 4_000);
 }
+/** A changed hunk is "substantive" once it carries at least this many +/- lines. */
+const SUBSTANTIVE_MIN_CHANGED_LINES = 2;
+/** Count real added/removed lines in a diff hunk (excluding the +++/--- file markers). */
+function countChangedLines(hunk) {
+    let n = 0;
+    for (const line of hunk.split('\n')) {
+        if ((line.startsWith('+') && !line.startsWith('+++')) ||
+            (line.startsWith('-') && !line.startsWith('---'))) {
+            n++;
+        }
+    }
+    return n;
+}
+/**
+ * Deterministic verification evidence: a decision is grounded when EVERY one of its
+ * affectedFiles appears in the diff with a substantive hunk. Returns the evidence
+ * file (the first affected file) when grounded, else null.
+ *
+ * This is the HF-1 fallback: the LLM `verify` step over-marks legitimate
+ * tool-addition decisions as `phantom`, stalling the dogfood gate. When the code
+ * is demonstrably in the diff, trust the diff over the LLM's "no evidence" call.
+ */
+export function substantiveEvidence(decision, diffByFile) {
+    if (decision.affectedFiles.length === 0)
+        return null;
+    let totalChanged = 0;
+    for (const file of decision.affectedFiles) {
+        const normalised = file.replace(/^[ab]\//, '');
+        const hunk = diffByFile.get(normalised);
+        if (!hunk)
+            return null; // require ALL affected files present
+        totalChanged += countChangedLines(hunk);
+    }
+    return totalChanged >= SUBSTANTIVE_MIN_CHANGED_LINES ? decision.affectedFiles[0] : null;
+}
 export async function verifyDecisions(decisions, diff, llm, commitMessages) {
     if (decisions.length === 0) {
         return { verified: [], phantom: [], missing: [] };
@@ -103,13 +138,21 @@ export async function verifyDecisions(decisions, diff, llm, commitMessages) {
             return [];
         return [{ ...d, status: 'verified', confidence: v.confidence, evidenceFile: v.evidenceFile, verifiedAt: now }];
     });
-    const phantom = result.phantom
-        .flatMap((p) => {
+    // HF-1: rescue any LLM-marked phantom whose affected files are all present in the
+    // diff with substantive hunks — trust the diff over the LLM's "no evidence" call.
+    const phantom = [];
+    for (const p of result.phantom) {
         const d = byId.get(p.id);
         if (!d)
-            return [];
-        return [{ ...d, status: 'phantom', confidence: 'low', verifiedAt: now }];
-    });
+            continue;
+        const evidenceFile = substantiveEvidence(d, diffByFile);
+        if (evidenceFile) {
+            verified.push({ ...d, status: 'verified', confidence: 'low', evidenceFile, verifiedAt: now });
+        }
+        else {
+            phantom.push({ ...d, status: 'phantom', confidence: 'low', verifiedAt: now });
+        }
+    }
     return { verified, phantom, missing: result.missing };
 }
 //# sourceMappingURL=verifier.js.map

package/dist/core/decisions/verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../../src/core/decisions/verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAGvE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;0EAiBoD,CAAC;AAc3E,8DAA8D;AAC9D,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,uEAAuE;AACvE,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,SAAS;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACzH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,QAAyB,EACzB,UAA+B,EAC/B,YAAoB;IAEpB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1G,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,mBAAmB;YAAE,MAAM;QACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,iFAAiF;IACjF,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAA4B,EAC5B,IAAY,EACZ,GAAe,EACf,cAAuB;IAEvB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEzC,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC1C,YAAY,EAAE,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC;KACrD,CAAC,CAAC,CAAC;IAEJ,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,CAAC,uBAAuB,cAAc,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,eAAe,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,aAAa,EAAE,CAAC;IAE9F,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;QAClC,YAAY,EAAE,aAAa;QAC3B,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,iCAAiC;QAC5C,WAAW,EAAE,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;IAE7B,MAAM,MAAM,GAAG,SAAS,CAAkB,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAE3F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAsB,MAAM,CAAC,QAAQ;SAChD,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1H,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAsB,MAAM,CAAC,OAAO;SAC9C,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,UAAU,EAAE,KAAc,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEL,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACxD,CAAC"}
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../../src/core/decisions/verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAGvE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;0EAiBoD,CAAC;AAc3E,8DAA8D;AAC9D,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,uEAAuE;AACvE,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,SAAS;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACzH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,QAAyB,EACzB,UAA+B,EAC/B,YAAoB;IAEpB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1G,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,mBAAmB;YAAE,MAAM;QACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,iFAAiF;IACjF,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAExC,0FAA0F;AAC1F,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACjD,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACtD,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAyB,EACzB,UAA+B;IAE/B,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,qCAAqC;QAC7D,YAAY,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,YAAY,IAAI,6BAA6B,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAA4B,EAC5B,IAAY,EACZ,GAAe,EACf,cAAuB;IAEvB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEzC,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC1C,YAAY,EAAE,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC;KACrD,CAAC,CAAC,CAAC;IAEJ,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,CAAC,uBAAuB,cAAc,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,eAAe,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,aAAa,EAAE,CAAC;IAE9F,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;QAClC,YAAY,EAAE,aAAa;QAC3B,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,iCAAiC;QAC5C,WAAW,EAAE,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;IAE7B,MAAM,MAAM,GAAG,SAAS,CAAkB,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAE3F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAsB,MAAM,CAAC,QAAQ;SAChD,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1H,CAAC,CAAC,CAAC;IAEL,kFAAkF;IAClF,kFAAkF;IAClF,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,YAAY,GAAG,mBAAmB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,YAAY,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACxD,CAAC"}

package/dist/core/provenance/change-coupling.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Change-Coupling & Volatility Analysis (spec-22) — mined from local git history.
+ *
+ * Two facts the call graph structurally cannot see:
+ *
+ *   1. Change coupling — "these files almost always change together." The
+ *      *invisible* coupling with no import/call edge: the config and the parser
+ *      that move in lockstep, the handler and its migration. An agent editing one
+ *      is warned about the sibling it would otherwise miss.
+ *   2. Volatility / churn — "this file changed 23 times." A caution flag: high-churn
+ *      code is where edits are riskiest.
+ *
+ * Prior art is logical/change coupling (CodeScene), whose own framing is decisive:
+ * change coupling "isn't possible to calculate from code alone — it is mined from
+ * git." Local, deterministic, no network (builds on Spec 18's git ingestion).
+ *
+ * Honest limits: co-change is CORRELATION, not causation; it is statistical and
+ * needs sufficient history; bulk commits (formatting sweeps, mass renames, vendored
+ * drops) manufacture false coupling. So: support/confidence thresholds, a documented
+ * bulk-commit size filter, and presentation as a SIGNAL, never a rule.
+ */
+export declare const COUPLING_MAX_COMMITS = 1000;
+export declare const COUPLING_BULK_THRESHOLD = 25;
+export declare const COUPLING_MIN_SUPPORT = 3;
+export declare const COUPLING_MIN_CONFIDENCE = 0.3;
+export declare const COUPLING_TOP_PAIRS = 5;
+export declare const VOLATILITY_HIGH = 12;
+export declare const VOLATILITY_MEDIUM = 5;
+export interface CoupledFile {
+    file: string;
+    /** Number of commits that changed both files. */
+    support: number;
+    /** support / churn(thisFile) — P(B changes | A changes), 0..1. */
+    confidence: number;
+}
+export interface ChangeCouplingResult {
+    /** file → number of (non-bulk) commits that touched it. */
+    churn: Map<string, number>;
+    /** file → its most-coupled files (above thresholds, capped, sorted). */
+    coupling: Map<string, CoupledFile[]>;
+    stats: {
+        commitsScanned: number;
+        bulkCommitsFiltered: number;
+        filesTracked: number;
+    };
+}
+/** Per-file change-coupling record as persisted/queried (spec-22). */
+export interface FileChangeCoupling {
+    filePath: string;
+    churn: number;
+    coupledWith: CoupledFile[];
+}
+export interface ChangeCouplingOptions {
+    maxCommits?: number;
+    bulkThreshold?: number;
+    minSupport?: number;
+    minConfidence?: number;
+    topPairs?: number;
+}
+/** Map a churn count to a volatility level (absolute thresholds over the window). */
+export declare function volatilityLevel(churn: number): 'high' | 'medium' | 'low';
+/**
+ * Compute co-change coupling + churn from the local git log. Returns empty maps
+ * for a non-git / empty repo — never throws, never blocks analyze. Deterministic
+ * for a fixed git state.
+ */
+export declare function analyzeChangeCoupling(rootPath: string, opts?: ChangeCouplingOptions): Promise<ChangeCouplingResult>;
+//# sourceMappingURL=change-coupling.d.ts.map

package/dist/core/provenance/change-coupling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-coupling.d.ts","sourceRoot":"","sources":["../../../src/core/provenance/change-coupling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AASH,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAInC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACrC,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF;AAED,sEAAsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,WAAW,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAIxE;AAOD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAkF/B"}

package/dist/core/provenance/change-coupling.js

@@ -0,0 +1,134 @@
+/**
+ * Change-Coupling & Volatility Analysis (spec-22) — mined from local git history.
+ *
+ * Two facts the call graph structurally cannot see:
+ *
+ *   1. Change coupling — "these files almost always change together." The
+ *      *invisible* coupling with no import/call edge: the config and the parser
+ *      that move in lockstep, the handler and its migration. An agent editing one
+ *      is warned about the sibling it would otherwise miss.
+ *   2. Volatility / churn — "this file changed 23 times." A caution flag: high-churn
+ *      code is where edits are riskiest.
+ *
+ * Prior art is logical/change coupling (CodeScene), whose own framing is decisive:
+ * change coupling "isn't possible to calculate from code alone — it is mined from
+ * git." Local, deterministic, no network (builds on Spec 18's git ingestion).
+ *
+ * Honest limits: co-change is CORRELATION, not causation; it is statistical and
+ * needs sufficient history; bulk commits (formatting sweeps, mass renames, vendored
+ * drops) manufacture false coupling. So: support/confidence thresholds, a documented
+ * bulk-commit size filter, and presentation as a SIGNAL, never a rule.
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { isGitRepository } from '../drift/git-diff.js';
+const execFileAsync = promisify(execFile);
+// Documented bounds & thresholds.
+export const COUPLING_MAX_COMMITS = 1000; // history window scanned
+export const COUPLING_BULK_THRESHOLD = 25; // commits touching > this many files are filtered (manufacture coupling)
+export const COUPLING_MIN_SUPPORT = 3; // min co-changes for a pair to count
+export const COUPLING_MIN_CONFIDENCE = 0.3; // min co-changes / churn(A)
+export const COUPLING_TOP_PAIRS = 5; // coupled files kept per file
+// Absolute churn thresholds over the scanned window → volatility level.
+export const VOLATILITY_HIGH = 12;
+export const VOLATILITY_MEDIUM = 5;
+const RS = '\x1e';
+/** Map a churn count to a volatility level (absolute thresholds over the window). */
+export function volatilityLevel(churn) {
+    if (churn >= VOLATILITY_HIGH)
+        return 'high';
+    if (churn >= VOLATILITY_MEDIUM)
+        return 'medium';
+    return 'low';
+}
+/** Round a confidence to 2 decimals deterministically. */
+function round2(n) {
+    return Math.round(n * 100) / 100;
+}
+/**
+ * Compute co-change coupling + churn from the local git log. Returns empty maps
+ * for a non-git / empty repo — never throws, never blocks analyze. Deterministic
+ * for a fixed git state.
+ */
+export async function analyzeChangeCoupling(rootPath, opts = {}) {
+    const empty = {
+        churn: new Map(), coupling: new Map(),
+        stats: { commitsScanned: 0, bulkCommitsFiltered: 0, filesTracked: 0 },
+    };
+    if (!(await isGitRepository(rootPath)))
+        return empty;
+    const maxCommits = opts.maxCommits ?? COUPLING_MAX_COMMITS;
+    const bulkThreshold = opts.bulkThreshold ?? COUPLING_BULK_THRESHOLD;
+    const minSupport = opts.minSupport ?? COUPLING_MIN_SUPPORT;
+    const minConfidence = opts.minConfidence ?? COUPLING_MIN_CONFIDENCE;
+    const topPairs = opts.topPairs ?? COUPLING_TOP_PAIRS;
+    let stdout;
+    try {
+        ({ stdout } = await execFileAsync('git', ['log', `--max-count=${maxCommits}`, '--no-merges', `--format=${RS}%h`, '--name-only'], { cwd: rootPath, maxBuffer: 128 * 1024 * 1024 }));
+    }
+    catch {
+        return empty;
+    }
+    // Parse into per-commit file sets.
+    const commitFileSets = [];
+    for (const seg of stdout.split(RS)) {
+        if (!seg.trim())
+            continue;
+        const lines = seg.split('\n').map(s => s.trim()).filter(Boolean);
+        // First line is the short SHA (from the format); the rest are file paths.
+        const files = lines.slice(1);
+        if (files.length > 0)
+            commitFileSets.push(files);
+    }
+    const churn = new Map();
+    // coOccur: "A\x00B" (A < B sorted) → count.
+    const coOccur = new Map();
+    let bulkFiltered = 0;
+    let scanned = 0;
+    for (const files of commitFileSets) {
+        if (files.length > bulkThreshold) {
+            bulkFiltered++;
+            continue;
+        }
+        scanned++;
+        const uniq = [...new Set(files)].sort();
+        for (const f of uniq)
+            churn.set(f, (churn.get(f) ?? 0) + 1);
+        for (let i = 0; i < uniq.length; i++) {
+            for (let j = i + 1; j < uniq.length; j++) {
+                const key = `${uniq[i]}\x00${uniq[j]}`;
+                coOccur.set(key, (coOccur.get(key) ?? 0) + 1);
+            }
+        }
+    }
+    // Build directed coupling per file from the symmetric co-occurrence counts.
+    const couplingTmp = new Map();
+    const addPair = (a, b, support) => {
+        const churnA = churn.get(a) ?? 0;
+        if (churnA === 0)
+            return;
+        const confidence = support / churnA;
+        if (support < minSupport || confidence < minConfidence)
+            return;
+        const arr = couplingTmp.get(a) ?? [];
+        arr.push({ file: b, support, confidence: round2(confidence) });
+        couplingTmp.set(a, arr);
+    };
+    for (const [key, support] of coOccur) {
+        const [a, b] = key.split('\x00');
+        addPair(a, b, support);
+        addPair(b, a, support);
+    }
+    // Sort + cap each file's coupled list deterministically.
+    const coupling = new Map();
+    for (const [file, arr] of couplingTmp) {
+        arr.sort((x, y) => y.confidence - x.confidence || y.support - x.support || x.file.localeCompare(y.file));
+        coupling.set(file, arr.slice(0, topPairs));
+    }
+    return {
+        churn,
+        coupling,
+        stats: { commitsScanned: scanned, bulkCommitsFiltered: bulkFiltered, filesTracked: churn.size },
+    };
+}
+//# sourceMappingURL=change-coupling.js.map

package/dist/core/provenance/change-coupling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-coupling.js","sourceRoot":"","sources":["../../../src/core/provenance/change-coupling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,kCAAkC;AAClC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,CAAK,yBAAyB;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC,CAAI,yEAAyE;AACvH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAQ,qCAAqC;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC,CAAG,4BAA4B;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAU,8BAA8B;AAC5E,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC,MAAM,EAAE,GAAG,MAAM,CAAC;AAiClB,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,IAAI,eAAe;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,KAAK,IAAI,iBAAiB;QAAE,OAAO,QAAQ,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0DAA0D;AAC1D,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,OAA8B,EAAE;IAEhC,MAAM,KAAK,GAAyB;QAClC,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE;QACrC,KAAK,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;KACtE,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC;IAErD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC/B,KAAK,EACL,CAAC,KAAK,EAAE,eAAe,UAAU,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,EACtF,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAChD,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mCAAmC;IACnC,MAAM,cAAc,GAAe,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,SAAS;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjE,0EAA0E;QAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,4CAA4C;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAAC,YAAY,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/D,OAAO,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,OAAe,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO;QACzB,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;QACpC,IAAI,OAAO,GAAG,UAAU,IAAI,UAAU,GAAG,aAAa;YAAE,OAAO;QAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/D,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,yDAAyD;IACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,KAAK,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE;KAChG,CAAC;AACJ,CAAC"}

package/dist/core/provenance/git-provenance.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Local provenance extractor (spec-18) — "who last changed this, in which PR".
+ *
+ * Reads the local `.git` history (and, only if present and authenticated, the
+ * local `gh` CLI) to produce per-file provenance. The deliberate constraint:
+ * **everything is local, nothing is uploaded.** This is the no-OAuth alternative
+ * to cloud connectors — the git-only path needs no network at all; `gh` is an
+ * optional enrichment that degrades gracefully when absent.
+ *
+ * Mirrors the parser→projector split used by IaC and decisions: this module is
+ * the parser (raw git → normalized records); project.ts maps records to typed
+ * `authored_by` / `changed_in_pr` graph edges.
+ */
+export declare const PROVENANCE_MAX_COMMITS = 1000;
+export declare const PROVENANCE_TOP_AUTHORS = 5;
+export declare const PROVENANCE_MAX_PRS = 5;
+export interface Author {
+    name: string;
+    email: string;
+}
+export interface PullRequest {
+    number: number;
+    /** Title — only populated when `gh` enrichment succeeds. */
+    title?: string;
+    /** open | closed | merged — only populated when `gh` enrichment succeeds. */
+    state?: string;
+}
+/** Per-file provenance — derived, regenerable, repo-relative POSIX path. */
+export interface FileProvenance {
+    filePath: string;
+    lastAuthor: Author;
+    lastDate: string;
+    lastCommit: string;
+    lastSubject: string;
+    /** Distinct authors, most-recent-first, capped — includes lastAuthor. */
+    recentAuthors: Author[];
+    /** Distinct PRs that touched the file, most-recent-first, capped. */
+    prs: PullRequest[];
+}
+export interface ProvenanceOptions {
+    maxCommits?: number;
+    topAuthors?: number;
+    maxPrs?: number;
+    /** Attempt `gh` enrichment for PR titles/state. Auto-skips if gh is absent. */
+    useGh?: boolean;
+}
+/** Extract the PR number a commit subject references (squash "(#123)" or merge). */
+export declare function parsePrNumber(subject: string): number | undefined;
+/**
+ * Extract per-file provenance for `files` (repo-relative POSIX paths).
+ *
+ * - Authors come from non-merge commits (real contributors, not the merger).
+ * - PR numbers come from squash subjects `(#N)` and merge commits
+ *   (`--first-parent`, which attributes a PR's full diff to its files).
+ * - Returns `[]` for a non-git or empty repo — never throws, never blocks analyze.
+ */
+export declare function extractProvenance(rootPath: string, files: string[], opts?: ProvenanceOptions): Promise<FileProvenance[]>;
+/**
+ * Enrich PR numbers with title/state via the local `gh` CLI — one bounded call.
+ * Returns an empty map when `gh` is absent, unauthenticated, or the repo has no
+ * GitHub remote. Never throws; the git-only path is unaffected.
+ */
+export declare function enrichWithGh(rootPath: string): Promise<Map<number, {
+    title: string;
+    state: string;
+}>>;
+//# sourceMappingURL=git-provenance.d.ts.map

package/dist/core/provenance/git-provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-provenance.d.ts","sourceRoot":"","sources":["../../../src/core/provenance/git-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAMpC,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,qEAAqE;IACrE,GAAG,EAAE,WAAW,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMjE;AAqCD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,cAAc,EAAE,CAAC,CAkF3B;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAcxD"}

package/dist/core/provenance/git-provenance.js

@@ -0,0 +1,177 @@
+/**
+ * Local provenance extractor (spec-18) — "who last changed this, in which PR".
+ *
+ * Reads the local `.git` history (and, only if present and authenticated, the
+ * local `gh` CLI) to produce per-file provenance. The deliberate constraint:
+ * **everything is local, nothing is uploaded.** This is the no-OAuth alternative
+ * to cloud connectors — the git-only path needs no network at all; `gh` is an
+ * optional enrichment that degrades gracefully when absent.
+ *
+ * Mirrors the parser→projector split used by IaC and decisions: this module is
+ * the parser (raw git → normalized records); project.ts maps records to typed
+ * `authored_by` / `changed_in_pr` graph edges.
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { logger } from '../../utils/logger.js';
+import { isGitRepository } from '../drift/git-diff.js';
+const execFileAsync = promisify(execFile);
+// Bounds (documented caps — never import unbounded history; never bloat the graph).
+export const PROVENANCE_MAX_COMMITS = 1000; // history depth scanned per pass
+export const PROVENANCE_TOP_AUTHORS = 5; // recent distinct authors kept per file
+export const PROVENANCE_MAX_PRS = 5; // distinct PRs kept per file
+const GH_PR_LIMIT = 200; // single bounded `gh pr list` enrichment
+const RS = '\x1e'; // record separator between commits
+const FS = '\x1f'; // field separator within a commit header
+/** Extract the PR number a commit subject references (squash "(#123)" or merge). */
+export function parsePrNumber(subject) {
+    const merge = subject.match(/Merge pull request #(\d+)/);
+    if (merge)
+        return parseInt(merge[1], 10);
+    const squash = subject.match(/\(#(\d+)\)\s*$/) ?? subject.match(/\(#(\d+)\)/);
+    if (squash)
+        return parseInt(squash[1], 10);
+    return undefined;
+}
+/** Run one `git log` pass and parse commits + their changed files. */
+async function gitLog(rootPath, extraArgs, maxCommits) {
+    const format = `${RS}%h${FS}%an${FS}%ae${FS}%aI${FS}%s`;
+    let stdout;
+    try {
+        ({ stdout } = await execFileAsync('git', ['log', `--max-count=${maxCommits}`, `--format=${format}`, '--name-only', ...extraArgs], { cwd: rootPath, maxBuffer: 64 * 1024 * 1024 }));
+    }
+    catch {
+        return []; // shallow/empty history, bad ref, etc. — never throw
+    }
+    const commits = [];
+    for (const seg of stdout.split(RS)) {
+        if (!seg.trim())
+            continue;
+        const nl = seg.indexOf('\n');
+        const header = nl === -1 ? seg : seg.slice(0, nl);
+        const [sha, name, email, date, subject] = header.split(FS);
+        if (!sha)
+            continue;
+        const files = nl === -1 ? [] : seg.slice(nl + 1).split('\n').map(s => s.trim()).filter(Boolean);
+        commits.push({ sha, author: { name: name ?? '', email: email ?? '' }, date: date ?? '', subject: subject ?? '', files });
+    }
+    return commits;
+}
+/**
+ * Extract per-file provenance for `files` (repo-relative POSIX paths).
+ *
+ * - Authors come from non-merge commits (real contributors, not the merger).
+ * - PR numbers come from squash subjects `(#N)` and merge commits
+ *   (`--first-parent`, which attributes a PR's full diff to its files).
+ * - Returns `[]` for a non-git or empty repo — never throws, never blocks analyze.
+ */
+export async function extractProvenance(rootPath, files, opts = {}) {
+    if (files.length === 0)
+        return [];
+    if (!(await isGitRepository(rootPath)))
+        return [];
+    const maxCommits = opts.maxCommits ?? PROVENANCE_MAX_COMMITS;
+    const topAuthors = opts.topAuthors ?? PROVENANCE_TOP_AUTHORS;
+    const maxPrs = opts.maxPrs ?? PROVENANCE_MAX_PRS;
+    const wanted = new Set(files);
+    // Pass A — authorship + squash PRs (real authors, no merge commits).
+    const authorCommits = await gitLog(rootPath, ['--no-merges'], maxCommits);
+    // Pass B — merge-workflow PRs (merge commits with their full diff).
+    const mergeCommits = await gitLog(rootPath, ['--merges', '--first-parent'], maxCommits);
+    if (authorCommits.length === 0 && mergeCommits.length === 0)
+        return [];
+    const byFile = new Map();
+    const acc = (f) => {
+        let a = byFile.get(f);
+        if (!a) {
+            a = { authors: [], authorKeys: new Set(), prNumbers: [], prSeen: new Set() };
+            byFile.set(f, a);
+        }
+        return a;
+    };
+    // git log is newest-first; the first commit touching a file is its last-touch.
+    for (const c of authorCommits) {
+        const pr = parsePrNumber(c.subject);
+        for (const f of c.files) {
+            if (!wanted.has(f))
+                continue;
+            const a = acc(f);
+            if (!a.lastAuthor) {
+                a.lastAuthor = c.author;
+                a.lastDate = c.date;
+                a.lastCommit = c.sha;
+                a.lastSubject = c.subject;
+            }
+            const key = c.author.email || c.author.name;
+            if (key && !a.authorKeys.has(key) && a.authors.length < topAuthors) {
+                a.authorKeys.add(key);
+                a.authors.push(c.author);
+            }
+            if (pr !== undefined && !a.prSeen.has(pr) && a.prNumbers.length < maxPrs) {
+                a.prSeen.add(pr);
+                a.prNumbers.push(pr);
+            }
+        }
+    }
+    for (const c of mergeCommits) {
+        const pr = parsePrNumber(c.subject);
+        if (pr === undefined)
+            continue;
+        for (const f of c.files) {
+            if (!wanted.has(f))
+                continue;
+            const a = acc(f);
+            if (!a.prSeen.has(pr) && a.prNumbers.length < maxPrs) {
+                a.prSeen.add(pr);
+                a.prNumbers.push(pr);
+            }
+        }
+    }
+    // Optional gh enrichment — one bounded call, best-effort, never required.
+    const allPrs = new Set();
+    for (const a of byFile.values())
+        for (const n of a.prNumbers)
+            allPrs.add(n);
+    const prMeta = (opts.useGh ?? true) && allPrs.size > 0
+        ? await enrichWithGh(rootPath)
+        : new Map();
+    const result = [];
+    for (const [filePath, a] of byFile) {
+        if (!a.lastAuthor)
+            continue; // only PRs from merge pass, no authorship → skip (no last-touch)
+        result.push({
+            filePath,
+            lastAuthor: a.lastAuthor,
+            lastDate: a.lastDate,
+            lastCommit: a.lastCommit,
+            lastSubject: a.lastSubject,
+            recentAuthors: a.authors,
+            prs: a.prNumbers.map(number => {
+                const meta = prMeta.get(number);
+                return meta ? { number, title: meta.title, state: meta.state } : { number };
+            }),
+        });
+    }
+    // Deterministic order.
+    result.sort((x, y) => x.filePath.localeCompare(y.filePath));
+    return result;
+}
+/**
+ * Enrich PR numbers with title/state via the local `gh` CLI — one bounded call.
+ * Returns an empty map when `gh` is absent, unauthenticated, or the repo has no
+ * GitHub remote. Never throws; the git-only path is unaffected.
+ */
+export async function enrichWithGh(rootPath) {
+    const out = new Map();
+    try {
+        const { stdout } = await execFileAsync('gh', ['pr', 'list', '--state', 'all', '--limit', String(GH_PR_LIMIT), '--json', 'number,title,state'], { cwd: rootPath, maxBuffer: 16 * 1024 * 1024 });
+        const prs = JSON.parse(stdout);
+        for (const p of prs)
+            out.set(p.number, { title: p.title, state: (p.state ?? '').toLowerCase() });
+    }
+    catch {
+        logger.debug?.('provenance: gh enrichment unavailable — using git-only provenance');
+    }
+    return out;
+}
+//# sourceMappingURL=git-provenance.js.map

package/dist/core/provenance/git-provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-provenance.js","sourceRoot":"","sources":["../../../src/core/provenance/git-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,oFAAoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,CAAC,iCAAiC;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,CAAI,wCAAwC;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAQ,6BAA6B;AACzE,MAAM,WAAW,GAAG,GAAG,CAAC,CAAoB,yCAAyC;AAErF,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,mCAAmC;AACtD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,yCAAyC;AAoC5D,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACzD,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9E,IAAI,MAAM;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,sEAAsE;AACtE,KAAK,UAAU,MAAM,CAAC,QAAgB,EAAE,SAAmB,EAAE,UAAkB;IAC7E,MAAM,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;IACxD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC/B,KAAK,EACL,CAAC,KAAK,EAAE,eAAe,UAAU,EAAE,EAAE,YAAY,MAAM,EAAE,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC,EACvF,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAC/C,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,qDAAqD;IAClE,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,SAAS;QAC1B,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,KAAe,EACf,OAA0B,EAAE;IAE5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAElD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,sBAAsB,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,sBAAsB,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,kBAAkB,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAE9B,qEAAqE;IACrE,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1E,oEAAoE;IACpE,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,UAAU,CAAC,CAAC;IAExF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAOvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAe,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAO,EAAE;QAC7B,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAC3G,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,+EAA+E;IAC/E,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBAClB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;gBAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;gBAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC;gBAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC;YAChG,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YAC5C,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBACnE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;gBACzE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;QACpD,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC;QAC9B,CAAC,CAAC,IAAI,GAAG,EAA4C,CAAC;IAExD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,UAAU;YAAE,SAAS,CAAC,iEAAiE;QAC9F,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ;YACR,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,QAAQ,EAAE,CAAC,CAAC,QAAS;YACrB,UAAU,EAAE,CAAC,CAAC,UAAW;YACzB,WAAW,EAAE,CAAC,CAAC,WAAY;YAC3B,aAAa,EAAE,CAAC,CAAC,OAAO;YACxB,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gBAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC9E,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,uBAAuB;IACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,GAAG,EAA4C,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,IAAI,EACJ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,EAChG,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAC/C,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4D,CAAC;QAC1F,KAAK,MAAM,CAAC,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,KAAK,EAAE,CAAC,mEAAmE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/provenance/project.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Projection: per-file provenance → typed `authored_by` / `changed_in_pr` graph
+ * edges (spec-18). The decisions/IaC analogue: git history is the authored source;
+ * this projection is derived and regenerable. Edges hang off existing file nodes —
+ * no person/PR nodes are added to the call graph, keeping it un-bloated (the cap is
+ * applied upstream in the extractor).
+ *
+ * Edge direction is code → context: a file is `authored_by` a person and
+ * `changed_in_pr` a pull request.
+ */
+import type { FileProvenance } from './git-provenance.js';
+/** file → person. `role: 'last'` marks the last-touch author. */
+export interface AuthoredByEdge {
+    kind: 'authored_by';
+    filePath: string;
+    name: string;
+    email: string;
+    /** Author date of the last-touch commit (only meaningful for role 'last'). */
+    lastDate?: string;
+    role: 'last' | 'recent';
+}
+/** file → pull request. `title`/`state` present only when `gh` enrichment succeeded. */
+export interface ChangedInPrEdge {
+    kind: 'changed_in_pr';
+    filePath: string;
+    pr: number;
+    title?: string;
+    state?: string;
+}
+export interface ProjectedProvenance {
+    authoredBy: AuthoredByEdge[];
+    changedInPr: ChangedInPrEdge[];
+}
+/** "Name <email>" display key for a person (stable identity). */
+export declare function personKey(name: string, email: string): string;
+export declare function projectProvenance(records: FileProvenance[]): ProjectedProvenance;
+//# sourceMappingURL=project.d.ts.map

package/dist/core/provenance/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../src/core/provenance/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;CACzB;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,iEAAiE;AACjE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,mBAAmB,CAgChF"}