@patronage/software-factory 1.0.0-alpha.0 → 1.0.0-alpha.10

package/dist/schemas.d.ts

@@ -493,11 +493,11 @@ interface PrReadyProof {
  */
 declare const impactStampSchema: z.ZodObject<{
   basis: z.ZodEnum<{
-    "lockfile-scoped": "lockfile-scoped";
+    "target-scoped": "target-scoped";
     conservative: "conservative";
   }>;
   reasons: z.ZodArray<z.ZodString>;
-  stampVersion: z.ZodLiteral<1>;
+  stampVersion: z.ZodLiteral<3>;
   targets: z.ZodArray<z.ZodObject<{
     basis: z.ZodString;
     impact: z.ZodEnum<{
@@ -506,6 +506,7 @@ declare const impactStampSchema: z.ZodObject<{
     }>;
     name: z.ZodString;
   }, z.core.$strip>>;
+  unsubscribedPaths: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
 type ImpactStamp = z.infer<typeof impactStampSchema>;
 //#endregion
@@ -1362,11 +1363,11 @@ declare const prVerifyProofSchema: z.ZodObject<{
   headSha: z.ZodString;
   impactStamp: z.ZodOptional<z.ZodObject<{
     basis: z.ZodEnum<{
-      "lockfile-scoped": "lockfile-scoped";
+      "target-scoped": "target-scoped";
       conservative: "conservative";
     }>;
     reasons: z.ZodArray<z.ZodString>;
-    stampVersion: z.ZodLiteral<1>;
+    stampVersion: z.ZodLiteral<3>;
     targets: z.ZodArray<z.ZodObject<{
       basis: z.ZodString;
       impact: z.ZodEnum<{
@@ -1375,6 +1376,7 @@ declare const prVerifyProofSchema: z.ZodObject<{
       }>;
       name: z.ZodString;
     }, z.core.$strip>>;
+    unsubscribedPaths: z.ZodArray<z.ZodString>;
   }, z.core.$strip>>;
   mergeBaseSha: z.ZodOptional<z.ZodString>;
   mode: z.ZodEnum<{

package/dist/schemas.js

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import "yaml";
+import "picomatch";
 //#region src/review-rungs.ts
 const EVIDENCE_REVIEW_RUNGS$1 = [
 	"independent-model",
@@ -239,16 +240,17 @@ const impactStampTargetSchema = z.object({
 * input widened every target to full impact.
 */
 const impactStampSchema = z.object({
-	basis: z.enum(["lockfile-scoped", "conservative"]),
+	basis: z.enum(["target-scoped", "conservative"]),
 	reasons: z.array(z.string()),
-	stampVersion: z.literal(1),
+	stampVersion: z.literal(3),
 	targets: z.array(impactStampTargetSchema).superRefine((targets, context) => {
 		const names = targets.map((target) => target.name);
 		if (new Set(names).size !== names.length) context.addIssue({
 			code: "custom",
 			message: "impact stamp targets must have distinct names."
 		});
-	})
+	}),
+	unsubscribedPaths: z.array(z.string())
 });
 /**
 * The surfaces that consume the stamp. One classification, consumed
@@ -267,7 +269,7 @@ const IMPACT_SCOPE_SURFACES = {
 * external proof demand (#542 wave 2), a verification-battery command, or a
 * preview (Alchemy) lifecycle stack (#430 wave 3).
 *
-* The only release path is a `lockfile-scoped` stamp of exactly this build's
+* The only release path is a `target-scoped` stamp of exactly this build's
 * stamp version whose target entry for exactly this name is provably
 * `not-affected`. Every other input — no trusted stamp, an unknown stamp
 * version, a conservative stamp, a name the stamp does not classify, or an
@@ -286,11 +288,11 @@ const impactStampScopeDecision = ({ stamp, surface, targetName }) => {
 		reason: `no trusted identity-bound impact stamp covers this candidate; ${floor}`,
 		scoped: false
 	};
-	if (stamp.stampVersion !== 1) return {
-		reason: `impact stamp version ${String(stamp.stampVersion)} is not this build's version 1; ${floor}`,
+	if (stamp.stampVersion !== 3) return {
+		reason: `impact stamp version ${String(stamp.stampVersion)} is not this build's version 3; ${floor}`,
 		scoped: false
 	};
-	if (stamp.basis !== "lockfile-scoped") return {
+	if (stamp.basis !== "target-scoped") return {
 		reason: `impact stamp is conservative (full impact assumed); ${floor}`,
 		scoped: false
 	};
@@ -435,7 +437,7 @@ const assertBatteryCompleteness = (proof, context) => {
 * so authorization is bound to the same identities the proof binds. The
 * predicate is the shared {@link impactStampScopeDecision}, not a second
 * reading of the stamp: an entry is authorized exactly when the stamp would
-* have released that target's command in the first place (lockfile-scoped
+* have released that target's command in the first place (target-scoped
 * basis, this build's stamp version, exactly one row for the target,
 * `not-affected`). A conservative stamp, an unknown version, a
 * self-contradictory stamp, an unclassified name, or an `affected` verdict all

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patronage/software-factory",
-  "version": "1.0.0-alpha.0",
+  "version": "1.0.0-alpha.10",
   "description": "Shared Patronage software factory CLI and project-profile validation tools",
   "license": "MIT",
   "repository": {
@@ -29,13 +29,15 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "next"
   },
   "dependencies": {
     "commander": "14.0.3",
     "picomatch": "^4.0.5",
     "yaml": "^2.9.0",
-    "zod": "4.4.3"
+    "zod": "4.4.3",
+    "@patronage/factory-ci": "1.0.0-alpha.10"
   },
   "devDependencies": {
     "@types/node": "24.13.3",
@@ -75,6 +77,8 @@
     "profile:schema": "tsx scripts/generate-profile-schema.ts",
     "pretest": "bash ../scripts/ensure-worktree-bootstrap.sh",
     "test": "vitest run",
+    "pretest:profile": "bash ../scripts/ensure-worktree-bootstrap.sh",
+    "test:profile": "tsx scripts/vitest-profile.ts",
     "pretest:stress": "bash ../scripts/ensure-worktree-bootstrap.sh",
     "test:stress": "node scripts/stress-tests.mjs",
     "pretypecheck": "bash ../scripts/ensure-worktree-bootstrap.sh",