projscan 4.10.0 → 4.11.0

package/dist/core/proofCards.js

@@ -0,0 +1,222 @@
+import { computeRiskDelta } from './riskDelta.js';
+const DEFAULT_MAX_CARDS = 5;
+export function buildProofCards(input) {
+    const maxCards = normalizeMaxCards(input.maxCards);
+    const cards = [
+        ...input.bugHuntFindings.map(cardFromBugHuntFinding),
+        ...input.qualityRisks.map(cardFromQualityRisk),
+    ];
+    const deduped = dedupeCards(cards);
+    const ranked = rankCards(deduped).slice(0, maxCards);
+    return ranked.map((card) => ({
+        ...card,
+        riskDelta: input.riskDelta ??
+            computeRiskDelta({
+                healthScore: 100,
+                qualityVerdict: 'needs_attention',
+                preflightVerdict: 'caution',
+                proofCards: ranked.map((entry) => ({
+                    id: entry.id,
+                    priority: entry.priority,
+                    source: entry.source,
+                })),
+                selectedCardIds: [card.id],
+            }),
+    }));
+}
+function cardFromBugHuntFinding(finding) {
+    const id = `proof-${finding.id}`;
+    return baseCard({
+        id,
+        priority: finding.priority,
+        source: finding.source,
+        finding: finding.title,
+        whyItMatters: finding.why,
+        files: finding.files,
+        evidence: finding.evidence.map((entry) => ({
+            source: String(entry.source),
+            detail: entry.message,
+            ...(entry.file ? { file: entry.file } : {}),
+            ...(entry.tool ? { command: entry.tool } : {}),
+        })),
+        commands: [...new Set([...finding.verification.commands, 'projscan bug-hunt --format json'])],
+        affectedAreas: affectedAreasForSource(finding.source),
+        fixSummary: fixSummaryForSource(finding.source, finding.title),
+        safeChangeShape: safeChangeShapeForSource(finding.source),
+        expected: finding.verification.expected,
+        confidence: finding.source === 'doctor' ? 'high' : 'medium',
+        suppressionHints: suppressionHintsForFinding(finding),
+    });
+}
+function cardFromQualityRisk(risk) {
+    const id = `proof-${risk.id}`;
+    return baseCard({
+        id,
+        priority: risk.priority,
+        source: risk.source,
+        finding: risk.title,
+        whyItMatters: whyQualityRiskMatters(risk),
+        files: risk.files,
+        evidence: [
+            {
+                source: 'quality-scorecard',
+                detail: risk.title,
+                ...(risk.files[0] ? { file: risk.files[0] } : {}),
+                command: risk.command,
+            },
+        ],
+        commands: [
+            ...new Set([
+                risk.command,
+                ...(risk.source === 'hotspot' ? [simulateCommandForRisk(risk)] : []),
+                'projscan quality-scorecard --format json',
+            ]),
+        ],
+        affectedAreas: affectedAreasForSource(risk.source),
+        fixSummary: fixSummaryForSource(risk.source, risk.title),
+        safeChangeShape: safeChangeShapeForSource(risk.source),
+        expected: 'The proof card remains explainable, the relevant risk drops, and tests pass.',
+        confidence: risk.source === 'issue' ? 'high' : 'medium',
+    });
+}
+function baseCard(input) {
+    const feedbackCommand = feedbackCommandFor(input.id);
+    return {
+        id: input.id,
+        priority: input.priority,
+        source: input.source,
+        finding: input.finding,
+        whyItMatters: input.whyItMatters,
+        files: input.files,
+        evidence: input.evidence,
+        impact: {
+            commands: input.commands,
+            affectedAreas: input.affectedAreas,
+            likelyFiles: input.files,
+        },
+        recommendedFix: {
+            summary: input.fixSummary,
+            safeChangeShape: input.safeChangeShape,
+        },
+        verification: {
+            commands: input.commands,
+            expected: input.expected,
+        },
+        confidence: input.confidence,
+        suppression: { command: feedbackCommand, ...input.suppressionHints },
+        feedback: { command: feedbackCommand },
+        riskDelta: { baselineScore: 0, projectedScore: 0, delta: 0, basis: [] },
+    };
+}
+function suppressionHintsForFinding(finding) {
+    const evidence = finding.evidence.find((entry) => entry.issueId || entry.file);
+    const ruleId = ruleIdFromEvidence(evidence);
+    const file = evidence?.file ?? finding.files[0];
+    if (!ruleId || !file)
+        return undefined;
+    return {
+        ...(evidence && 'line' in evidence && typeof evidence.line === 'number'
+            ? { inlineHint: `// projscan-ignore-line ${ruleId} -- reason` }
+            : {}),
+        configHint: `"suppress": { "${ruleId}": ["${file}"] }`,
+    };
+}
+function ruleIdFromEvidence(evidence) {
+    const issueId = evidence?.issueId;
+    if (!issueId)
+        return undefined;
+    if (issueId === 'hardcoded-secret' || issueId.startsWith('hardcoded-secret-'))
+        return 'hardcoded-secret';
+    return issueId;
+}
+function dedupeCards(cards) {
+    const seen = new Set();
+    return cards.filter((card) => {
+        const key = `${card.files[0] ?? card.id}:${card.finding}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+}
+function rankCards(cards) {
+    return cards
+        .map((card, index) => ({ card, index }))
+        .sort((a, b) => priorityRank(a.card.priority) - priorityRank(b.card.priority) ||
+        sourceRank(a.card.source) - sourceRank(b.card.source) ||
+        a.index - b.index)
+        .map((entry) => entry.card);
+}
+function affectedAreasForSource(source) {
+    if (source === 'doctor')
+        return ['health'];
+    if (source === 'hotspot')
+        return ['maintainability'];
+    if (source === 'coordination' || source === 'session')
+        return ['coordination'];
+    if (source === 'preflight')
+        return ['ship-readiness'];
+    return ['quality'];
+}
+function whyQualityRiskMatters(risk) {
+    if (risk.source === 'hotspot') {
+        return 'This file concentrates churn, complexity, issue, or ownership risk and deserves a bounded review before broad changes.';
+    }
+    if (risk.source === 'coordination') {
+        return 'Coordination risk can cause agents or engineers to overwrite each other or validate the wrong state.';
+    }
+    return 'This issue-backed risk is visible in the project health signal and can affect confidence in daily gates.';
+}
+function fixSummaryForSource(source, title) {
+    if (source === 'hotspot')
+        return `Reduce the risk behind "${title}" with one focused extraction or test first.`;
+    if (source === 'coordination')
+        return 'Resolve the coordination conflict before changing shared files.';
+    if (source === 'session')
+        return 'Review touched files and clear active session conflicts before continuing.';
+    if (source === 'preflight')
+        return 'Close the preflight blocker or document the required manual sign-off.';
+    return `Address "${title}" with the smallest change that removes the finding.`;
+}
+function safeChangeShapeForSource(source) {
+    if (source === 'hotspot') {
+        return 'Inspect the file first, extract one pure helper or add one missing regression test, then rerun the listed proof commands.';
+    }
+    if (source === 'coordination' || source === 'session') {
+        return 'Synchronize ownership, re-run session or coordinate evidence, then continue with one owner for the file.';
+    }
+    if (source === 'preflight') {
+        return 'Fix concrete blockers first; for review-only scale, collect sign-off before merge or release.';
+    }
+    return 'Make one narrow code or config change, avoid unrelated cleanup, and rerun the listed proof commands.';
+}
+function feedbackCommandFor(id) {
+    return `projscan feedback intake --text "${id}: false positive because ..." --format json`;
+}
+function simulateCommandForRisk(risk) {
+    return `projscan simulate --plan "Reduce the risk behind ${risk.title.replace(/["\\]/g, '\\$&')}" --format json`;
+}
+function priorityRank(priority) {
+    if (priority === 'p0')
+        return 0;
+    if (priority === 'p1')
+        return 1;
+    return 2;
+}
+function sourceRank(source) {
+    if (source === 'doctor' || source === 'issue')
+        return 0;
+    if (source === 'preflight')
+        return 1;
+    if (source === 'hotspot')
+        return 2;
+    if (source === 'coordination' || source === 'session')
+        return 3;
+    return 4;
+}
+function normalizeMaxCards(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value))
+        return DEFAULT_MAX_CARDS;
+    return Math.max(1, Math.min(25, Math.floor(value)));
+}
+//# sourceMappingURL=proofCards.js.map

package/dist/core/proofCards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proofCards.js","sourceRoot":"","sources":["../../src/core/proofCards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAkBlD,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,MAAM,UAAU,eAAe,CAAC,KAA2B;IACzD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG;QACZ,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACpD,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC;KAC/C,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,GAAG,IAAI;QACP,SAAS,EACP,KAAK,CAAC,SAAS;YACf,gBAAgB,CAAC;gBACf,WAAW,EAAE,GAAG;gBAChB,cAAc,EAAE,iBAAiB;gBACjC,gBAAgB,EAAE,SAAS;gBAC3B,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACjC,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;aAC3B,CAAC;KACL,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAuB;IACrD,MAAM,EAAE,GAAG,SAAS,OAAO,CAAC,EAAE,EAAE,CAAC;IACjC,OAAO,QAAQ,CAAC;QACd,EAAE;QACF,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,YAAY,EAAE,OAAO,CAAC,GAAG;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,MAAM,EAAE,KAAK,CAAC,OAAO;YACrB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC,CAAC;QACH,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC,CAAC;QAC7F,aAAa,EAAE,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC;QACrD,UAAU,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC;QAC9D,eAAe,EAAE,wBAAwB,CAAC,OAAO,CAAC,MAAM,CAAC;QACzD,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ;QACvC,UAAU,EAAE,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QAC3D,gBAAgB,EAAE,0BAA0B,CAAC,OAAO,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA0B;IACrD,MAAM,EAAE,GAAG,SAAS,IAAI,CAAC,EAAE,EAAE,CAAC;IAC9B,OAAO,QAAQ,CAAC;QACd,EAAE;QACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,KAAK;QACnB,YAAY,EAAE,qBAAqB,CAAC,IAAI,CAAC;QACzC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE;YACR;gBACE,MAAM,EAAE,mBAAmB;gBAC3B,MAAM,EAAE,IAAI,CAAC,KAAK;gBAClB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB;SACF;QACD,QAAQ,EAAE;YACR,GAAG,IAAI,GAAG,CAAC;gBACT,IAAI,CAAC,OAAO;gBACZ,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,0CAA0C;aAC3C,CAAC;SACH;QACD,aAAa,EAAE,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC;QAClD,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC;QACxD,eAAe,EAAE,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;QACtD,QAAQ,EAAE,8EAA8E;QACxF,UAAU,EAAE,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;KACxD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAkBjB;IACC,MAAM,eAAe,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrD,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,KAAK;SACzB;QACD,cAAc,EAAE;YACd,OAAO,EAAE,KAAK,CAAC,UAAU;YACzB,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC;QACD,YAAY,EAAE;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;QACD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,gBAAgB,EAAE;QACpE,QAAQ,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE;QACtC,SAAS,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,OAAuB;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO;QACL,GAAG,CAAC,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACrE,CAAC,CAAC,EAAE,UAAU,EAAE,2BAA2B,MAAM,YAAY,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,UAAU,EAAE,kBAAkB,MAAM,QAAQ,IAAI,MAAM;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAsC;IAChE,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,OAAO,KAAK,kBAAkB,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAC3E,OAAO,kBAAkB,CAAC;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAwB;IACzC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SACvC,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7D,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACrD,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CACpB;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAyB;IACvD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/E,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtD,OAAO,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,qBAAqB,CAAC,IAA0B;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,wHAAwH,CAAC;IAClI,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACnC,OAAO,sGAAsG,CAAC;IAChH,CAAC;IACD,OAAO,0GAA0G,CAAC;AACpH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAyB,EAAE,KAAa;IACnE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,2BAA2B,KAAK,8CAA8C,CAAC;IAChH,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO,iEAAiE,CAAC;IACxG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,4EAA4E,CAAC;IAC9G,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,uEAAuE,CAAC;IAC3G,OAAO,YAAY,KAAK,sDAAsD,CAAC;AACjF,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAyB;IACzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,2HAA2H,CAAC;IACrI,CAAC;IACD,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,0GAA0G,CAAC;IACpH,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,+FAA+F,CAAC;IACzG,CAAC;IACD,OAAO,sGAAsG,CAAC;AAChH,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAU;IACpC,OAAO,oCAAoC,EAAE,6CAA6C,CAAC;AAC7F,CAAC;AAED,SAAS,sBAAsB,CAAC,IAA0B;IACxD,OAAO,oDAAoD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC;AACnH,CAAC;AAED,SAAS,YAAY,CAAC,QAA0B;IAC9C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,MAAyB;IAC3C,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/core/riskDelta.d.ts

@@ -0,0 +1,19 @@
+import type { PreflightVerdict, QualityScorecardVerdict, WorkplanPriority } from '../types.js';
+import type { AssessBaselineComparison, AssessReport, RiskDeltaSnapshot } from '../types/assess.js';
+export interface RiskDeltaInput {
+    healthScore: number;
+    qualityVerdict: QualityScorecardVerdict;
+    preflightVerdict: PreflightVerdict;
+    proofCards: Array<{
+        id: string;
+        priority: WorkplanPriority;
+        source: string;
+    }>;
+    selectedCardIds?: string[];
+}
+export declare function computeRiskDelta(input: RiskDeltaInput): RiskDeltaSnapshot;
+export declare function compareRiskDeltaSnapshots(input: {
+    previous: Pick<AssessReport, 'riskDelta'>;
+    current: Pick<AssessReport, 'riskDelta'>;
+    baselinePath?: string;
+}): AssessBaselineComparison;

package/dist/core/riskDelta.js

@@ -0,0 +1,77 @@
+export function computeRiskDelta(input) {
+    const basis = [`health score ${clamp(input.healthScore)}`];
+    const qualityPenalty = qualityVerdictPenalty(input.qualityVerdict);
+    const preflightPenalty = preflightVerdictPenalty(input.preflightVerdict);
+    const cardPenalty = input.proofCards.reduce((sum, card) => sum + priorityPenalty(card.priority), 0);
+    if (qualityPenalty > 0)
+        basis.push(`quality verdict ${input.qualityVerdict} penalty ${qualityPenalty}`);
+    if (preflightPenalty > 0)
+        basis.push(`preflight verdict ${input.preflightVerdict} penalty ${preflightPenalty}`);
+    if (cardPenalty > 0)
+        basis.push(`${input.proofCards.length} proof card risk penalty ${cardPenalty}`);
+    const baselineScore = clamp(input.healthScore - qualityPenalty - preflightPenalty - cardPenalty);
+    const selected = new Set(input.selectedCardIds ?? []);
+    const selectedCards = input.proofCards.filter((card) => selected.has(card.id));
+    const improvement = selectedCards.reduce((sum, card) => sum + expectedImprovement(card.priority), 0);
+    for (const card of selectedCards) {
+        basis.push(`${card.priority} ${card.source} improvement ${expectedImprovement(card.priority)}`);
+    }
+    const projectedScore = clamp(baselineScore + improvement);
+    return {
+        baselineScore,
+        projectedScore,
+        delta: projectedScore - baselineScore,
+        basis,
+    };
+}
+export function compareRiskDeltaSnapshots(input) {
+    const previousScore = clamp(input.previous.riskDelta.projectedScore);
+    const currentScore = clamp(input.current.riskDelta.projectedScore);
+    const delta = currentScore - previousScore;
+    const suffix = input.baselinePath ? ` since ${input.baselinePath}` : '';
+    const direction = delta > 0 ? 'improved' : delta < 0 ? 'declined' : 'is unchanged';
+    const amount = delta === 0 ? '' : ` by ${Math.abs(delta)}`;
+    return {
+        previousScore,
+        currentScore,
+        delta,
+        ...(input.baselinePath ? { baselinePath: input.baselinePath } : {}),
+        summary: `risk score ${direction}${amount}${suffix}`,
+    };
+}
+function qualityVerdictPenalty(verdict) {
+    if (verdict === 'blocked')
+        return 30;
+    if (verdict === 'needs_attention')
+        return 15;
+    if (verdict === 'healthy')
+        return 4;
+    return 0;
+}
+function preflightVerdictPenalty(verdict) {
+    if (verdict === 'block')
+        return 30;
+    if (verdict === 'caution')
+        return 12;
+    return 0;
+}
+function priorityPenalty(priority) {
+    if (priority === 'p0')
+        return 12;
+    if (priority === 'p1')
+        return 8;
+    return 3;
+}
+function expectedImprovement(priority) {
+    if (priority === 'p0')
+        return 18;
+    if (priority === 'p1')
+        return 12;
+    return 5;
+}
+function clamp(value) {
+    if (!Number.isFinite(value))
+        return 0;
+    return Math.max(0, Math.min(100, Math.round(value)));
+}
+//# sourceMappingURL=riskDelta.js.map

package/dist/core/riskDelta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"riskDelta.js","sourceRoot":"","sources":["../../src/core/riskDelta.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,MAAM,KAAK,GAAa,CAAC,gBAAgB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAEpG,IAAI,cAAc,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,cAAc,YAAY,cAAc,EAAE,CAAC,CAAC;IACxG,IAAI,gBAAgB,GAAG,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,CAAC,gBAAgB,YAAY,gBAAgB,EAAE,CAAC,CAAC;IACxF,IAAI,WAAW,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,4BAA4B,WAAW,EAAE,CAAC,CAAC;IAErG,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,cAAc,GAAG,gBAAgB,GAAG,WAAW,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EACvD,CAAC,CACF,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,gBAAgB,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,aAAa,GAAG,WAAW,CAAC,CAAC;IAC1D,OAAO;QACL,aAAa;QACb,cAAc;QACd,KAAK,EAAE,cAAc,GAAG,aAAa;QACrC,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,YAAY,GAAG,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;IACnF,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3D,OAAO;QACL,aAAa;QACb,YAAY;QACZ,KAAK;QACL,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,cAAc,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgC;IAC7D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,OAAO,KAAK,iBAAiB;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAyB;IACxD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CAAC,QAA0B;IACjD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA0B;IACrD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/core/simulate.d.ts

@@ -0,0 +1,6 @@
+import type { SimulateReport } from '../types/simulate.js';
+export interface ComputeSimulationOptions {
+    plan: string;
+    maxFiles?: number;
+}
+export declare function computeSimulation(rootPath: string, options: ComputeSimulationOptions): Promise<SimulateReport>;

package/dist/core/simulate.js

@@ -0,0 +1,298 @@
+import path from 'node:path';
+import { buildCodeGraph } from './codeGraph.js';
+import { computeQualityScorecard } from './qualityScorecard.js';
+import { scanRepository } from './repositoryScanner.js';
+import { computeRiskDelta } from './riskDelta.js';
+const DEFAULT_MAX_FILES = 5;
+const NO_MATCH_WARNING = 'No repo files matched the plan. Mention a file, symbol, command, package, or module name for a stronger simulation.';
+export async function computeSimulation(rootPath, options) {
+    const plan = normalizePlan(options.plan);
+    if (!plan)
+        throw new Error('simulate requires a non-empty plan');
+    const maxFiles = normalizeMaxFiles(options.maxFiles);
+    const [scan, quality] = await Promise.all([
+        scanRepository(rootPath),
+        computeQualityScorecard(rootPath, { maxRisks: maxFiles }),
+    ]);
+    const graph = await buildCodeGraph(rootPath, scan.files).catch(() => undefined);
+    const candidateFiles = rankCandidateFiles({
+        plan,
+        files: scan.files,
+        graph,
+        risks: quality.topRisks,
+    }).slice(0, maxFiles);
+    const testsLikelyAffected = likelyTests(scan.files, candidateFiles);
+    const contractsLikelyAffected = inferContracts(plan, candidateFiles);
+    const warnings = candidateFiles.length === 0 ? [NO_MATCH_WARNING] : [];
+    const proofCards = candidateFiles.map((candidate) => ({
+        id: `simulate-${slug(candidate.path)}`,
+        priority: priorityForCandidate(candidate),
+        source: candidate.qualityRisk ? 'hotspot' : 'plan',
+    }));
+    const riskDelta = computeRiskDelta({
+        healthScore: quality.health.score,
+        qualityVerdict: quality.verdict,
+        preflightVerdict: 'proceed',
+        proofCards,
+        selectedCardIds: proofCards.slice(0, 2).map((card) => card.id),
+    });
+    const confidence = confidenceFor(candidateFiles, graph);
+    const verdict = verdictFor(confidence, riskDelta.delta);
+    const rolloutPlan = buildRolloutPlan(plan, candidateFiles, testsLikelyAffected);
+    const proofCommands = buildProofCommands(plan, candidateFiles, testsLikelyAffected);
+    const evidence = buildEvidence(candidateFiles, testsLikelyAffected, contractsLikelyAffected);
+    return {
+        schemaVersion: 1,
+        plan,
+        verdict,
+        confidence,
+        summary: summarize(verdict, confidence, candidateFiles, riskDelta.delta),
+        filesLikelyTouched: candidateFiles,
+        testsLikelyAffected,
+        contractsLikelyAffected,
+        riskDelta,
+        rolloutPlan,
+        proofCommands,
+        evidence,
+        warnings,
+    };
+}
+function rankCandidateFiles(input) {
+    const planLower = input.plan.toLowerCase();
+    const planTerms = tokenize(input.plan);
+    const riskByFile = new Map();
+    for (const risk of input.risks) {
+        for (const file of risk.files)
+            riskByFile.set(file, risk);
+    }
+    return input.files
+        .map((file) => scoreFile(file, planLower, planTerms, input.graph, riskByFile.get(file.relativePath)))
+        .filter((candidate) => candidate.score > 0)
+        .sort((a, b) => b.score - a.score ||
+        testRank(a.path) - testRank(b.path) ||
+        a.path.localeCompare(b.path));
+}
+function scoreFile(file, planLower, planTerms, graph, qualityRisk) {
+    const basename = path.basename(file.relativePath);
+    const basenameNoExt = basename.replace(/\.[^.]+$/, '');
+    const fileTerms = tokenize(`${file.relativePath} ${basenameNoExt}`);
+    const reasons = [];
+    let score = 0;
+    if (planLower.includes(file.relativePath.toLowerCase())) {
+        score += 80;
+        reasons.push(`plan mentions ${file.relativePath}`);
+    }
+    else if (planLower.includes(basename.toLowerCase())) {
+        score += 70;
+        reasons.push(`plan mentions ${basename}`);
+    }
+    else if (basenameNoExt && planLower.includes(basenameNoExt.toLowerCase())) {
+        score += 60;
+        reasons.push(`plan mentions ${basenameNoExt}`);
+    }
+    const overlap = [...fileTerms].filter((term) => planTerms.has(term) && term.length > 2);
+    if (overlap.length > 0) {
+        score += overlap.length * 12;
+        reasons.push(`plan shares term(s): ${overlap.slice(0, 4).join(', ')}`);
+    }
+    if (qualityRisk && score > 0) {
+        score += 8;
+        reasons.push(`quality signal: ${qualityRisk.title}`);
+    }
+    const gf = graph?.files.get(file.relativePath);
+    const fanIn = graph?.localImporters.get(file.relativePath)?.size ?? 0;
+    const fanOut = gf?.imports.length ?? 0;
+    if (score > 0 && gf && (fanIn > 0 || fanOut > 0))
+        score += Math.min(10, fanIn + fanOut);
+    const graphSummary = gf && graph ? graphFor(file.relativePath, gf, graph) : undefined;
+    return {
+        path: file.relativePath,
+        score,
+        reasons,
+        ...(graphSummary ? { graph: graphSummary } : {}),
+        ...(qualityRisk ? { qualityRisk: qualityRisk.title } : {}),
+    };
+}
+function graphFor(file, graphFile, graph) {
+    return {
+        fanIn: graph.localImporters.get(file)?.size ?? 0,
+        fanOut: graphFile.imports.length,
+        directImporters: [...(graph.localImporters.get(file) ?? new Set())].sort(),
+    };
+}
+function likelyTests(files, candidates) {
+    const testFiles = files
+        .map((file) => file.relativePath)
+        .filter((file) => /(?:^|[./_-])(test|spec)\.[^.]+$/.test(file) || /\.(test|spec)\.[^.]+$/.test(file))
+        .sort();
+    const matches = new Map();
+    for (const candidate of candidates) {
+        const candidateBase = path.basename(candidate.path).replace(/\.[^.]+$/, '').toLowerCase();
+        for (const test of testFiles) {
+            const testLower = test.toLowerCase();
+            const score = testScore(testLower, candidateBase);
+            if (score > 0)
+                matches.set(test, Math.max(matches.get(test) ?? 0, score));
+        }
+    }
+    return [...matches]
+        .sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]))
+        .map(([test]) => test);
+}
+function testScore(testLower, candidateBase) {
+    const testBase = path
+        .basename(testLower)
+        .replace(/\.(test|spec)\.[^.]+$/, '')
+        .replace(/\.[^.]+$/, '');
+    if (testBase === candidateBase)
+        return 100;
+    return testLower.includes(candidateBase) ? 40 : 0;
+}
+function inferContracts(plan, candidates) {
+    const terms = tokenize(plan);
+    const contracts = new Set();
+    if (hasAny(terms, ['split', 'extract', 'module', 'modules', 'boundary']))
+        contracts.add('module boundary');
+    if (hasAny(terms, ['cli', 'command', 'commands']))
+        contracts.add('CLI command surface');
+    if (hasAny(terms, ['mcp', 'tool', 'tools']))
+        contracts.add('MCP tool surface');
+    if (hasAny(terms, ['type', 'types', 'api', 'export', 'public']))
+        contracts.add('public API/types');
+    if (candidates.some((candidate) => candidate.path.startsWith('src/cli/')))
+        contracts.add('CLI command surface');
+    if (candidates.some((candidate) => candidate.path.startsWith('src/mcp/')))
+        contracts.add('MCP tool surface');
+    if (candidates.some((candidate) => candidate.path.includes('/types') || candidate.path === 'src/types.ts'))
+        contracts.add('public API/types');
+    return [...contracts].sort();
+}
+function buildRolloutPlan(plan, candidates, tests) {
+    const primary = candidates[0]?.path;
+    const firstTest = tests[0];
+    return [
+        {
+            title: 'Lock the current behavior',
+            detail: firstTest
+                ? `Run or add the closest regression test before moving code: ${firstTest}.`
+                : 'Add one regression test around the behavior named in the plan before moving code.',
+            commands: firstTest ? [`npm test -- ${firstTest}`] : ['projscan assess --mode fix-first --format json'],
+        },
+        {
+            title: 'Extract the smallest module boundary',
+            detail: primary
+                ? `Move one responsibility out of ${primary}; keep imports and public exports stable until tests pass.`
+                : 'Name the target file or symbol, then extract one responsibility without broad cleanup.',
+            commands: primary ? [`projscan file ${primary} --format json`] : ['projscan understand --intent "where should this change go?" --format json'],
+        },
+        {
+            title: 'Wire callers through the existing public surface',
+            detail: 'Update direct importers first and avoid renaming public contracts unless the simulation calls them out.',
+            commands: primary ? [`projscan impact ${primary} --format json`] : ['projscan quality-scorecard --format json'],
+        },
+        {
+            title: 'Run proof commands and compare risk',
+            detail: `After the change, rerun the simulator for the same plan and compare risk delta.`,
+            commands: [`projscan simulate --plan ${quotePlan(plan)} --format json`],
+        },
+    ];
+}
+function buildProofCommands(plan, candidates, tests) {
+    const commands = [
+        `projscan simulate --plan ${quotePlan(plan)} --format json`,
+        'projscan assess --mode fix-first --format json',
+        'projscan quality-scorecard --format json',
+    ];
+    for (const candidate of candidates.slice(0, 3)) {
+        commands.push(`projscan file ${candidate.path} --format json`);
+        commands.push(`projscan impact ${candidate.path} --format json`);
+    }
+    for (const test of tests.slice(0, 3))
+        commands.push(`npm test -- ${test}`);
+    return [...new Set(commands)];
+}
+function buildEvidence(candidates, tests, contracts) {
+    const evidence = [];
+    for (const candidate of candidates) {
+        evidence.push({
+            source: 'plan-match',
+            detail: candidate.reasons.join('; '),
+            file: candidate.path,
+            command: `projscan file ${candidate.path} --format json`,
+        });
+        if (candidate.graph) {
+            evidence.push({
+                source: 'code-graph',
+                detail: `fan-in ${candidate.graph.fanIn}, fan-out ${candidate.graph.fanOut}, direct importers ${candidate.graph.directImporters.length}`,
+                file: candidate.path,
+                command: `projscan impact ${candidate.path} --format json`,
+            });
+        }
+    }
+    if (tests.length > 0) {
+        evidence.push({
+            source: 'test-neighbor',
+            detail: `${tests.length} likely affected test file(s)`,
+            file: tests[0],
+        });
+    }
+    if (contracts.length > 0) {
+        evidence.push({
+            source: 'contract-inference',
+            detail: contracts.join(', '),
+        });
+    }
+    return evidence;
+}
+function verdictFor(confidence, delta) {
+    if (confidence === 'low')
+        return 'needs-more-evidence';
+    if (delta <= 0)
+        return 'not-worth-it-yet';
+    return 'worth-doing';
+}
+function confidenceFor(candidates, graph) {
+    if (candidates.length === 0)
+        return 'low';
+    if (candidates[0] && candidates[0].score >= 80 && graph)
+        return 'high';
+    return 'medium';
+}
+function summarize(verdict, confidence, candidates, delta) {
+    if (candidates.length === 0)
+        return `${verdict}: low-confidence simulation needs a concrete target`;
+    return `${verdict}: ${confidence}-confidence plan touches ${candidates.length} likely file(s), projected risk delta +${delta}`;
+}
+function priorityForCandidate(candidate) {
+    if (candidate.score >= 90)
+        return 'p0';
+    if (candidate.score >= 45)
+        return 'p1';
+    return 'p2';
+}
+function normalizePlan(value) {
+    return value?.trim().replace(/\s+/g, ' ') ?? '';
+}
+function normalizeMaxFiles(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value))
+        return DEFAULT_MAX_FILES;
+    return Math.max(1, Math.min(25, Math.floor(value)));
+}
+function tokenize(value) {
+    const spaced = value.replace(/([a-z0-9])([A-Z])/g, '$1 $2').toLowerCase();
+    const terms = spaced.match(/[a-z0-9]+/g) ?? [];
+    return new Set(terms.filter((term) => term.length > 1));
+}
+function hasAny(terms, values) {
+    return values.some((value) => terms.has(value));
+}
+function quotePlan(plan) {
+    return `"${plan.replace(/["\\]/g, '\\$&')}"`;
+}
+function slug(value) {
+    return value.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '');
+}
+function testRank(file) {
+    return /\.(test|spec)\.[^.]+$/.test(file) ? 1 : 0;
+}
+//# sourceMappingURL=simulate.js.map