@patronage/software-factory 1.0.0-alpha.22 → 1.0.0-alpha.23

package/dist/index.d.ts

@@ -472,159 +472,448 @@ declare function sweepHqSpoolOrphans(input: {
   env?: NodeJS.ProcessEnv;
 }): Promise<HqSpoolOrphanSweep>;
 //#endregion
-//#region src/demand-waiver.d.ts
-declare const DEFAULT_DEMAND_WAIVER_PATH = ".factory-memory/demand-waivers.json";
-/** One recorded operator act: this demand, on this candidate, waived. */
-interface DemandWaiver {
-  candidate: {
-    headSha: string;
-    pr: number;
+//#region src/packages/review-prompt-sections/schema.d.ts
+declare const reviewPromptSectionSchema: z.ZodObject<{
+  provenance: z.ZodEnum<{
+    "prior-review-ledger": "prior-review-ledger";
+    "issue-review-focus": "issue-review-focus";
+  }>;
+  source: z.ZodString;
+  text: z.ZodString;
+}, z.core.$strict>;
+type ReviewPromptSection = z.infer<typeof reviewPromptSectionSchema>;
+type ReviewPromptSectionProvenance = ReviewPromptSection["provenance"];
+declare const reviewPromptSectionsSchema: z.ZodArray<z.ZodObject<{
+  provenance: z.ZodEnum<{
+    "prior-review-ledger": "prior-review-ledger";
+    "issue-review-focus": "issue-review-focus";
+  }>;
+  source: z.ZodString;
+  text: z.ZodString;
+}, z.core.$strict>>;
+//#endregion
+//#region src/review-ladder-policy.d.ts
+type ReviewFindingSeverity = "critical" | "high" | "medium" | "low" | "unknown";
+type ReviewFindingCategory = "correctness" | "safety" | "coordination" | "maintainability" | "unknown";
+declare const REVIEW_SEVERITIES: readonly ["critical", "high", "medium", "low", "unknown"];
+declare const resolveReviewFindingSeverity: (priority?: string) => ReviewFindingSeverity;
+declare const resolveReviewFindingCategory: (category?: string) => ReviewFindingCategory;
+declare const FINDING_DISPOSITIONS: readonly ["open", "fixed-in-thread", "follow-up-filed", "waived", "stale-repeat", "rerun-noise"];
+type FindingDisposition = (typeof FINDING_DISPOSITIONS)[number];
+interface ReviewFindingAttributes {
+  blockingAfterCap?: boolean;
+  category?: string;
+  citedSpan?: string;
+  file?: string;
+  prescribedAction?: string;
+  priority?: string;
+  supersedes?: {
+    file?: string;
+    title: string;
   };
-  demand: string;
-  /** The authenticated GitHub account that recorded the waiver. */
-  operator: string;
-  rationale: string;
-  recordedAt: string;
-  /** Optional audit metadata; never waiver authority. */
-  session?: string;
+  title: string;
 }
-interface DemandWaiverStore {
-  command: "patronage-factory demand:waive";
-  schemaVersion: 1;
-  waivers: DemandWaiver[];
+type BlockingResolvableFinding = Pick<ReviewFindingAttributes, "blockingAfterCap" | "category" | "priority">;
+declare const resolveFindingBlocking: (finding: BlockingResolvableFinding, disposition?: FindingDisposition) => boolean;
+interface ReviewLadderPolicy {
+  gate: {
+    cap: number;
+  };
+  interior: {
+    cap: number;
+  };
 }
-declare const validateDemandWaiverStore: (value: unknown) => DemandWaiverStore;
-/**
- * A demand that was in force, was NOT met, and was waived by the operator.
- *
- * `unmetReasons` is required and non-empty: every reason the demand refused is
- * carried through verbatim. There is no field on this record that could say
- * "satisfied", and no code path constructs one without a refusal to carry.
- */
-interface WaivedDemand {
-  demand: string;
-  operator: string;
-  rationale: string;
-  recordedAt: string;
-  session?: string;
-  /** The demand's refusals at evaluation time, preserved verbatim. */
-  unmetReasons: string[];
+declare const resolveReviewLadderPolicy: () => ReviewLadderPolicy;
+//#endregion
+//#region src/review-ladder-ledger.d.ts
+type LadderCycleStage = "interior" | "gate";
+interface LadderCycleRef {
+  cycle: number;
+  stage: LadderCycleStage;
 }
-declare const waivedDemandSchema: z.ZodType<WaivedDemand>;
-/** The waivers that bind one candidate: same PR, same head. */
-declare const selectWaiversForCandidate: ({
-  headSha,
-  pr,
-  waivers
-}: {
-  headSha: string | undefined;
-  pr: number;
-  waivers: readonly DemandWaiver[];
-}) => DemandWaiver[];
-interface DemandOutcome {
-  blockingReasons: string[];
-  waived?: WaivedDemand;
+type LadderFindingReport = ReviewFindingAttributes;
+type DeclarableFindingDisposition = Exclude<FindingDisposition, "open" | "stale-repeat" | "rerun-noise">;
+interface LadderDispositionDeclaration {
+  disposition: DeclarableFindingDisposition;
+  finding: {
+    file?: string;
+    title: string;
+  };
+  findingReport?: LadderFindingReport;
+  reference?: string;
 }
-/**
- * Fold one resolved demand's refusals through the operator's waivers.
- *
- * A satisfied demand (no refusals) stays satisfied and the waiver stays inert
- * — a waiver can only ever move a demand from *unmet-and-blocking* to
- * *unmet-and-waived*, never to met.
- */
-declare const applyDemandWaiver: ({
-  demand,
-  reasons,
-  waivers
-}: {
-  demand: string;
-  reasons: readonly string[];
-  waivers: readonly DemandWaiver[];
-}) => DemandOutcome;
-/** How a waived demand reads to a human. Never the word "satisfied". */
-declare const waivedDemandNotice: (waived: WaivedDemand) => string;
-interface DemandWaiverAuthorization {
-  operator: string;
-  session?: string;
+interface FindingLedgerEntry extends ReviewFindingAttributes {
+  disposition: FindingDisposition;
+  firstFlagged: LadderCycleRef;
+  flagCount: number;
+  key: string;
+  lastFlagged: LadderCycleRef;
+  priorDisposition?: FindingDisposition;
+  reference?: string;
+  reopenedCount: number;
+  staleRepeatCount: number;
 }
-type AuthorizeDemandWaiverResult = {
-  authorization: DemandWaiverAuthorization;
-  refusals?: undefined;
-} | {
-  authorization?: undefined;
-  refusals: string[];
-};
-/**
- * Operator identity, `declaredBy`-style: a named human account, recorded on
- * the waiver and enforced here. Session is optional audit metadata only: it is
- * not credential-backed, so its absence or equality never authorizes or
- * refuses an operator act.
- */
-declare const authorizeDemandWaiver: ({
-  authenticatedLogin,
-  session
-}: {
-  authenticatedLogin: string | undefined;
-  session: string | undefined;
-}) => AuthorizeDemandWaiverResult;
-//#endregion
-//#region src/blocked-reasons.d.ts
-declare const blockedReasonSchema: z.ZodObject<{
-  code: z.ZodString;
-  detail: z.ZodString;
-}, z.core.$strip>;
-type BlockedReason = z.infer<typeof blockedReasonSchema>;
+declare const findingKey: (finding: {
+  citedSpan?: string;
+  file?: string;
+  prescribedAction?: string;
+  title?: string;
+}) => string;
+declare const openLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
+declare const blockingLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
+declare const staleRepeatLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
+declare const inferFixedInThreadDispositions: (ledger: FindingLedgerEntry[], findings: readonly LadderFindingReport[], options?: {
+  sameHeadAsPriorCycle?: boolean;
+}) => LadderDispositionDeclaration[];
 //#endregion
-//#region src/arm-auto-merge.d.ts
-interface ArmAutoMergeInput {
-  cwd: string;
-  /** The validated PR head this arming is a compare-and-set against. */
-  headSha: string;
-  owner: string;
-  pr: number;
-  repo: string;
-}
-/**
- * What the PR actually did, read back after the call — never inferred from the
- * exit code. `not-armed` is a failure: the candidate is admitted but nothing
- * will merge it, so it carries the detail and `pr:ready` emits a re-dispatch.
- */
-interface ArmAutoMergeOutcome {
-  /** Why the arming did not take effect, or what the invocation reported. */
-  detail?: string;
-  headSha: string;
-  outcome: "armed" | "merged" | "not-armed";
+//#region src/review-ladder.d.ts
+type ReviewLadderExecutedStage = "interior" | "gate";
+interface LadderSessionAttribution {
+  orchestrationMode?: "autonomous" | "manual";
+  resumedSession?: boolean;
+  runtime?: string;
+  sessionId?: string;
 }
-//#endregion
-//#region src/checkout-repository.d.ts
-interface CheckoutRepository {
-  name: string;
-  owner: string;
+interface LadderUsageReport {
+  estimatedCostUsd?: number;
+  source?: string;
+  totalTokens?: number;
 }
-//#endregion
-//#region src/follow-up.d.ts
-interface FactoryCliInvocation {
-  /** Runtime arguments ending with the factory CLI entry module. */
-  argvPrefix: string[];
-  executable: string;
+interface ReviewLadderCycle {
+  dispositions?: LadderDispositionDeclaration[];
+  engine?: string;
+  findings: LadderFindingReport[];
+  identity?: {
+    headSha: string;
+    patchId: string;
+  };
+  model?: string;
+  correlatedRerun?: boolean;
+  session?: LadderSessionAttribution;
+  stage: LadderCycleStage;
+  usage?: LadderUsageReport;
 }
-declare const FactoryCliInvocationSchema: z.ZodType<FactoryCliInvocation>;
-interface FollowUpAction {
-  /**
-   * Machine-safe argv-style array for the obvious next action, e.g.
-   * ["gh","pr","merge","513","--squash"]. Same shape and field name that
-   * `factory:delegate --print` emits, so an orchestrating agent can spawn the
-   * next command without reconstructing a shell string. argv[0] is the
-   * executable; the rest are literal, already-split arguments.
-   */
-  argv: string[];
-  /**
-   * Human-readable rendering of {@link argv} for logs and operators. Additive
-   * to argv, never a substitute for it — argv is the source of truth.
-   */
-  command: string;
+interface LadderInteriorCapTransition {
+  cap: number;
+  kind: "interior-cap-reached";
 }
-/**
+interface LadderGateCapTransition {
+  blockingFindings: string[];
+  cap: number;
+  kind: "gate-cap-exhausted";
+}
+type LadderForcedTransition = LadderGateCapTransition | LadderInteriorCapTransition;
+interface LadderRunInteriorCycleAction {
+  cycle: number;
+  kind: "run-interior-cycle";
+}
+type LadderGateNextAction = {
+  cycle: number;
+  kind: "run-gate-cycle";
+} | {
+  kind: "accept-nonblocking-findings";
+} | {
+  kind: "escalate-to-triage";
+} | {
+  kind: "ready-for-human";
+};
+type LadderPosition = {
+  forcedTransition?: LadderGateCapTransition;
+  nextAction: LadderGateNextAction;
+  stage: "gate";
+} | {
+  forcedTransition?: LadderInteriorCapTransition;
+  nextAction: {
+    kind: "advance-to-gate";
+  };
+  stage: "interior-complete";
+} | {
+  forcedTransition?: never;
+  nextAction: LadderRunInteriorCycleAction;
+  stage: "interior";
+};
+type LadderNextAction = LadderPosition["nextAction"];
+type ReviewLadderStage = LadderPosition["stage"];
+interface ReviewLadderStageEvent {
+  cycle: number;
+  cyclesToClean?: number;
+  engine?: string;
+  findingsSummary: {
+    blocking: number;
+    bySeverity: Record<ReviewFindingSeverity, number>;
+    flagged: number;
+    open: number;
+    staleRepeats: number;
+  };
+  forcedTransition?: LadderForcedTransition["kind"];
+  model?: string;
+  payloadVersion: 1;
+  session?: LadderSessionAttribution;
+  stage: ReviewLadderExecutedStage;
+  type: "review-ladder-stage";
+  usage?: LadderUsageReport;
+}
+interface LadderDiagnostic {
+  code: "interior-cycles-unrecorded";
+  message: string;
+}
+type ReviewLadderEvaluation = LadderPosition & {
+  cycleCounts: {
+    gate: number;
+    interior: number;
+  };
+  diagnostics: LadderDiagnostic[];
+  event?: ReviewLadderStageEvent;
+  ledger: FindingLedgerEntry[];
+  unmatchedDispositions: LadderDispositionDeclaration[];
+};
+interface EvaluateReviewLadderInput {
+  cycles: ReviewLadderCycle[];
+  policy: ReviewLadderPolicy;
+}
+declare const evaluateReviewLadder: ({
+  cycles,
+  policy
+}: EvaluateReviewLadderInput) => ReviewLadderEvaluation;
+//#endregion
+//#region src/pr-readiness/ladder-proof-state.d.ts
+interface PrReviewLadderState {
+  cycles: ReviewLadderCycle[];
+}
+interface OpenCycleState {
+  autoBlockingFindings: number;
+  blockingEntries: ReviewFindingAttributes[];
+  openEntries: ReviewFindingAttributes[];
+  staleRepeatFindings?: number;
+}
+interface ReviewLadderSummaryState {
+  cycleCounts: {
+    gate: number;
+    interior: number;
+  };
+  forcedTransition?: LadderForcedTransition["kind"];
+  nextAction: LadderNextAction["kind"];
+  stage: ReviewLadderStage;
+}
+interface ReviewLadderSnapshot {
+  cycleState: OpenCycleState;
+  evaluation: ReviewLadderEvaluation;
+  ledger: FindingLedgerEntry[];
+  policyGateCap: number;
+  summary: ReviewLadderSummaryState;
+}
+type ReviewEpochMode = {
+  kind: "ladder";
+  ladder: PrReviewLadderState;
+  snapshot?: ReviewLadderSnapshot;
+} | {
+  kind: "declared-window";
+};
+//#endregion
+//#region src/pr-readiness/review-proof-types.d.ts
+type PrReviewKind = "correctness" | "security";
+type PrReviewMode = PrReviewKind | "all";
+type PrReviewOutcome = "passed" | "failed" | "error";
+interface PrReviewStageResolution {
+  model: string;
+  sessionId: string;
+}
+//#endregion
+//#region src/pr-readiness/review-proof-shape.d.ts
+interface PrReviewFinding extends ReviewFindingAttributes {
+  body: string;
+  category?: ReviewFindingCategory;
+  line?: number;
+  protocolFinding?: true;
+}
+interface PrReviewResult {
+  kind: PrReviewKind;
+  startedAt: string;
+  endedAt: string;
+  durationMs: number;
+  model?: string;
+  producer?: string;
+  rung?: EvidenceReviewRung;
+  sessionId?: string;
+  outcome: PrReviewOutcome;
+  issuesFlagged: number;
+  summary: string;
+  findings: PrReviewFinding[];
+  typedVerdict?: boolean;
+  verdictSource?: "footer" | "recovered";
+  promptSections?: ReviewPromptSection[];
+}
+interface PrReviewProof {
+  schemaVersion: 2;
+  findingProvenanceVersion: 1;
+  base: string;
+  headSha: string;
+  patchId: string;
+  reviewCycle?: number;
+  maxReviewCycles?: number;
+  changedFiles: string[];
+  cleanedPaths: string[];
+  ladder?: PrReviewLadderState;
+  reviewRequirement?: {
+    reason: "no-applicable-mode" | "faithful-merge";
+    status: "not-required";
+  };
+  reviews: PrReviewResult[];
+}
+//#endregion
+//#region src/demand-waiver.d.ts
+declare const DEFAULT_DEMAND_WAIVER_PATH = ".factory-memory/demand-waivers.json";
+/** One recorded operator act: this demand, on this candidate, waived. */
+interface DemandWaiver {
+  candidate: {
+    headSha: string;
+    pr: number;
+  };
+  demand: string;
+  /** The authenticated GitHub account that recorded the waiver. */
+  operator: string;
+  rationale: string;
+  recordedAt: string;
+  /** Optional audit metadata; never waiver authority. */
+  session?: string;
+}
+interface DemandWaiverStore {
+  command: "patronage-factory demand:waive";
+  schemaVersion: 1;
+  waivers: DemandWaiver[];
+}
+declare const validateDemandWaiverStore: (value: unknown) => DemandWaiverStore;
+/**
+ * A demand that was in force, was NOT met, and was waived by the operator.
+ *
+ * `unmetReasons` is required and non-empty: every reason the demand refused is
+ * carried through verbatim. There is no field on this record that could say
+ * "satisfied", and no code path constructs one without a refusal to carry.
+ */
+interface WaivedDemand {
+  demand: string;
+  operator: string;
+  rationale: string;
+  recordedAt: string;
+  session?: string;
+  /** The demand's refusals at evaluation time, preserved verbatim. */
+  unmetReasons: string[];
+}
+declare const waivedDemandSchema: z.ZodType<WaivedDemand>;
+/** The waivers that bind one candidate: same PR, same head. */
+declare const selectWaiversForCandidate: ({
+  headSha,
+  pr,
+  waivers
+}: {
+  headSha: string | undefined;
+  pr: number;
+  waivers: readonly DemandWaiver[];
+}) => DemandWaiver[];
+interface DemandOutcome {
+  blockingReasons: string[];
+  waived?: WaivedDemand;
+}
+/**
+ * Fold one resolved demand's refusals through the operator's waivers.
+ *
+ * A satisfied demand (no refusals) stays satisfied and the waiver stays inert
+ * — a waiver can only ever move a demand from *unmet-and-blocking* to
+ * *unmet-and-waived*, never to met.
+ */
+declare const applyDemandWaiver: ({
+  demand,
+  reasons,
+  waivers
+}: {
+  demand: string;
+  reasons: readonly string[];
+  waivers: readonly DemandWaiver[];
+}) => DemandOutcome;
+/** How a waived demand reads to a human. Never the word "satisfied". */
+declare const waivedDemandNotice: (waived: WaivedDemand) => string;
+interface DemandWaiverAuthorization {
+  operator: string;
+  session?: string;
+}
+type AuthorizeDemandWaiverResult = {
+  authorization: DemandWaiverAuthorization;
+  refusals?: undefined;
+} | {
+  authorization?: undefined;
+  refusals: string[];
+};
+/**
+ * Operator identity, `declaredBy`-style: a named human account, recorded on
+ * the waiver and enforced here. Session is optional audit metadata only: it is
+ * not credential-backed, so its absence or equality never authorizes or
+ * refuses an operator act.
+ */
+declare const authorizeDemandWaiver: ({
+  authenticatedLogin,
+  session
+}: {
+  authenticatedLogin: string | undefined;
+  session: string | undefined;
+}) => AuthorizeDemandWaiverResult;
+//#endregion
+//#region src/blocked-reasons.d.ts
+declare const blockedReasonSchema: z.ZodObject<{
+  code: z.ZodString;
+  detail: z.ZodString;
+}, z.core.$strip>;
+type BlockedReason = z.infer<typeof blockedReasonSchema>;
+//#endregion
+//#region src/arm-auto-merge.d.ts
+interface ArmAutoMergeInput {
+  cwd: string;
+  /** The validated PR head this arming is a compare-and-set against. */
+  headSha: string;
+  owner: string;
+  pr: number;
+  repo: string;
+}
+/**
+ * What the PR actually did, read back after the call — never inferred from the
+ * exit code. `not-armed` is a failure: the candidate is admitted but nothing
+ * will merge it, so it carries the detail and `pr:ready` emits a re-dispatch.
+ */
+interface ArmAutoMergeOutcome {
+  /** Why the arming did not take effect, or what the invocation reported. */
+  detail?: string;
+  headSha: string;
+  outcome: "armed" | "merged" | "not-armed";
+}
+//#endregion
+//#region src/checkout-repository.d.ts
+interface CheckoutRepository {
+  name: string;
+  owner: string;
+}
+//#endregion
+//#region src/follow-up.d.ts
+interface FactoryCliInvocation {
+  /** Runtime arguments ending with the factory CLI entry module. */
+  argvPrefix: string[];
+  executable: string;
+}
+declare const FactoryCliInvocationSchema: z.ZodType<FactoryCliInvocation>;
+interface FollowUpAction {
+  /**
+   * Machine-safe argv-style array for the obvious next action, e.g.
+   * ["gh","pr","merge","513","--squash"]. Same shape and field name that
+   * `factory:delegate --print` emits, so an orchestrating agent can spawn the
+   * next command without reconstructing a shell string. argv[0] is the
+   * executable; the rest are literal, already-split arguments.
+   */
+  argv: string[];
+  /**
+   * Human-readable rendering of {@link argv} for logs and operators. Additive
+   * to argv, never a substitute for it — argv is the source of truth.
+   */
+  command: string;
+}
+/**
  * Build a {@link FollowUpAction} from a literal argv array. The `command`
  * string is derived from argv so the two never drift.
  */
@@ -650,7 +939,7 @@ declare const impactStampSchema: z.ZodObject<{
   }>;
   inertPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
   reasons: z.ZodArray<z.ZodString>;
-  stampVersion: z.ZodLiteral<3>;
+  stampVersion: z.ZodLiteral<4>;
   targets: z.ZodArray<z.ZodObject<{
     basis: z.ZodString;
     impact: z.ZodEnum<{
@@ -658,6 +947,7 @@ declare const impactStampSchema: z.ZodObject<{
       "not-affected": "not-affected";
     }>;
     name: z.ZodString;
+    subscribedPaths: z.ZodArray<z.ZodString>;
   }, z.core.$strip>>;
   unsubscribedPaths: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
@@ -758,541 +1048,296 @@ declare const factoryProjectProfileSchema: z.ZodObject<{
       name: z.ZodString;
       requiredCheck: z.ZodOptional<z.ZodString>;
       scope: z.ZodDefault<z.ZodEnum<{
-        trivial: "trivial";
-        "docs-only": "docs-only";
-        full: "full";
-      }>>;
-    }, z.core.$strip>>;
-  }, z.core.$strip>;
-}, z.core.$strict>;
-type FactoryProjectProfile = z.infer<typeof factoryProjectProfileSchema>;
-declare const resolveFactoryRepository: (profile?: Pick<FactoryProjectProfile, "repository"> | undefined) => string;
-interface LoadProjectProfileInput {
-  cwd?: string;
-  profilePath?: string;
-}
-interface LoadProjectProfileResult {
-  path: string;
-  profile: FactoryProjectProfile;
-}
-declare function loadProjectProfile(input?: LoadProjectProfileInput): LoadProjectProfileResult;
-//#endregion
-//#region src/pr-verify-mode.d.ts
-/**
- * The verification mode `pr:verify` resolved for a run.
- *
- * Canonically declared here rather than inside `pr-readiness/` so that modules
- * on either side of that boundary — the readiness proof shape and the durable
- * check-run payload — can name the same union without importing each other.
- */
-type ResolvedPrVerifyMode = "docs-only" | "trivial" | "full";
-//#endregion
-//#region src/pr-verify-status.d.ts
-type CommitStatusState = "failure" | "pending" | "success";
-interface PostCommitStatusInput {
-  context?: string;
-  cwd: string;
-  description: string;
-  owner: string;
-  repo: string;
-  sha: string;
-  state: CommitStatusState;
-  /**
-   * Drop this mirror's own failure diagnostic because the caller has already
-   * reported the same cause. Set only on the pre-push path, where the status
-   * POST 422s for exactly the reason the pre-push notice gives and a trailing
-   * "unable to post ... status" line would put back the false-defect reading
-   * that notice exists to remove (#316).
-   *
-   * Deliberately a field on the request rather than a second, quieter poster:
-   * an injected `PostCommitStatus` double sees the flag, so the branch is
-   * assertable instead of collapsing to the same closure under test.
-   */
-  suppressFailureDiagnostic?: boolean;
-  targetUrl: string;
-}
-type PostCommitStatus = (input: PostCommitStatusInput) => void;
-//#endregion
-//#region src/user-config.d.ts
-declare const githubAppConfigSchema: z.ZodObject<{
-  appId: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
-  installationId: z.ZodOptional<z.ZodNumber>;
-  privateKeyPath: z.ZodString;
-}, z.core.$strip>;
-type GithubAppConfig = z.infer<typeof githubAppConfigSchema>;
-declare const factoryUserConfigSchema: z.ZodObject<{
-  githubApp: z.ZodOptional<z.ZodObject<{
-    appId: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
-    installationId: z.ZodOptional<z.ZodNumber>;
-    privateKeyPath: z.ZodString;
-  }, z.core.$strip>>;
-  hqAllowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
-  hqIngestCredentials: z.ZodOptional<z.ZodObject<{
-    clientIdRef: z.ZodString;
-    clientSecretRef: z.ZodString;
-  }, z.core.$strip>>;
-  schemaVersion: z.ZodLiteral<2>;
-}, z.core.$strip>;
-type FactoryUserConfig = z.infer<typeof factoryUserConfigSchema>;
-interface LoadUserConfigResult {
-  path: string;
-  config: FactoryUserConfig;
-  ignoredKeys?: string[];
-}
-//#endregion
-//#region src/github-check-runs.d.ts
-declare const FACTORY_CHECK_NAMES: {
-  readonly "pr-ready": "patronage-factory/pr-ready";
-  readonly "pr-verify": "patronage-factory/pr-verify";
-};
-type FactoryCheckGate = keyof typeof FACTORY_CHECK_NAMES;
-interface PublishFactoryCheckInput {
-  conclusion?: "failure" | "success";
-  cwd: string;
-  gate: FactoryCheckGate;
-  /**
-   * HQ lane-permalink base (`<origin>/lanes/by-ref`). When present, the check
-   * run's Details link deep-links to the HQ lane page instead of the PR-ledger
-   * fallback. Derive it from the repository profile via
-   * `hqLaneRefBaseUrlFromProfile` — the same source as the HQ gate sink.
-   */
-  hqLaneBaseUrl?: string;
-  owner: string;
-  pr?: number;
-  proof: unknown;
-  repo: string;
-  sha: string;
-  status?: "completed" | "in_progress";
-}
-interface CheckRunDependencies {
-  fetch?: typeof fetch;
-  githubApp?: GithubAppConfig;
-  now?: () => number;
-  postCommitStatus?: PostCommitStatus;
-  resolveDetailsUrl?: (input: PublishFactoryCheckInput) => Promise<string> | string;
-  /**
-   * Bounded retry for the check-run POST. GitHub answers 422 for a head SHA it
-   * has not seen yet, which is the normal state when `pr:verify` runs before
-   * the branch is pushed, and is also briefly true right after a push.
-   */
-  retry?: {
-    attempts: number;
-    budgetMs?: number;
-    delayMs: number;
-  };
-  /** Injectable delay for the bounded retry (tests only). */
-  sleep?: (ms: number) => Promise<void>;
-  /** Overrides GITHUB_PUBLISH_TIMEOUT_MS for the App fetch calls (tests only). */
-  timeoutMs?: number;
-}
-/**
- * Publish a factory check run and *wait* for it, so a caller that has just made
- * the head SHA visible on GitHub (pushed the branch, created the PR) can make
- * the proof reliably present for that SHA before it returns (#247).
- *
- * Never throws and never posts a commit-status fallback: the commit status is a
- * human-readable mirror, not a proof surface, so a caller that needs an
- * App-verified check run must be told plainly whether it got one. Returns
- * `true` only when the App-owned check run landed.
- *
- * "Landed" means GitHub serves it, not that the POST was accepted (#520). On
- * PR #519 the POST was accepted, `pr:ready` reported ready and armed, and the
- * source-pinned required check read `in_progress` across three runs — so GitHub
- * never scheduled the merge and emitted no rollup row saying why. Arming
- * already refuses to infer its outcome from the invocation and reads the pull
- * request back (`arm-auto-merge.ts`); publication now does the same.
- *
- * "Landed" is judged against every run of the name from the pinned App, not
- * against the one GitHub collapses to (#524): the newest must be *this* run, in
- * the status and conclusion that were published, and no run of the name may
- * still be unfinished. A surviving `in_progress` run blocks the required check
- * on its own, so confirming past it would report success on a pull request
- * GitHub will never merge. One read, no polling: an unconfirmed publication
- * returns `false`, which `pr:ready` already turns into a notice and an
- * idempotent re-dispatch.
- *
- * Confirmation is a point-in-time read, deliberately: a later publication for
- * the same name changes the answer — a completed one by becoming the newest, an
- * unfinished one by holding the check open beside this verdict rather than
- * replacing it — and every remaining writer publishes once, as the last thing
- * its invocation does. No retry, no poll, no re-confirm.
- */
-declare function ensureFactoryCheckRunPublished(input: PublishFactoryCheckInput, dependencies?: CheckRunDependencies & {
-  onDiagnostic?: (message: string) => void;
-}): Promise<boolean>;
-//#endregion
-//#region src/merge-freeze.d.ts
-declare const MERGE_FREEZE_CHECK_NAME = "patronage-factory/merge-freeze";
-declare const MERGE_FREEZE_APP_SLUG = "patronage-factory";
-declare const mergeFreezeStateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
-  active: z.ZodLiteral<true>;
-  generationId: z.ZodNumber;
-  headSha: z.ZodString;
-  outcome: z.ZodEnum<{
-    active: "active";
-    stale: "stale";
-  }>;
-  reason: z.ZodString;
-  recordedAt: z.ZodISODateTime;
-  schemaVersion: z.ZodLiteral<1>;
-}, z.core.$strip>, z.ZodObject<{
-  active: z.ZodLiteral<false>;
-  clearRationale: z.ZodOptional<z.ZodString>;
-  generationId: z.ZodNumber;
-  headSha: z.ZodString;
-  outcome: z.ZodLiteral<"inactive">;
-  reason: z.ZodString;
-  recordedAt: z.ZodISODateTime;
-  schemaVersion: z.ZodLiteral<1>;
-}, z.core.$strip>], "active">;
-type MergeFreezeState = z.infer<typeof mergeFreezeStateSchema>;
-/**
- * The write side of this contract lives in the generated merge-target push
- * Verify workflow (#356, ADR 0016 as amended; #429): it is the ONLY producer of
- * `patronage-factory/merge-freeze` generations. Its emitted `output.text`
- * payload must parse under this exact reader schema, which is what the
- * workflow's own tests assert through this export.
- */
-declare function validateMergeFreezeState(value: unknown): MergeFreezeState;
-interface MergeFreezeStoreInput {
-  cwd: string;
-  headSha: string;
-  repository: CheckoutRepository;
-}
-interface MergeFreezeStore {
-  read: (input: MergeFreezeStoreInput) => unknown;
-}
-/**
- * The freeze generation as a readiness decision needs to see it (#477).
- *
- * `read` above collapses three different situations into one refusal, because
- * merge time treated all of them as "do not merge". Readiness distinguishes
- * them: a settled generation is the writer's verdict, a **settling** one is the
- * window between a merge landing and its merge-target Verify completing (a
- * running generation, or a missing generation proven by the immediately prior
- * settled tip plus a current source-pinned verify run), and an **unreadable**
- * one is ambiguous, malformed, foreign-App, or unavailable state. Same
- * selection, same pinned App, same `started_at` ordering — only the reporting
- * is finer.
- */
-type MergeFreezeGeneration = {
-  kind: "settled";
-  state: MergeFreezeState;
-} | {
-  kind: "settling";
-  reason: string;
-  running?: {
-    headSha: string;
-    id: number;
-  };
-} | {
-  kind: "unreadable";
-  reason: string;
-};
-/** A merge-freeze reader that can also report the settle window (#477). */
-interface MergeFreezeAuthority extends MergeFreezeStore {
-  readGeneration: (input: MergeFreezeStoreInput) => MergeFreezeGeneration;
-}
-//#endregion
-//#region src/pr-proof-io.d.ts
-interface ProofDescriptor<T> {
-  label: string;
-  defaultPath: string;
-  schemaVersion: number;
-  parse: (raw: unknown) => T;
-}
-//#endregion
-//#region src/packages/review-prompt-sections/schema.d.ts
-declare const reviewPromptSectionSchema: z.ZodObject<{
-  provenance: z.ZodEnum<{
-    "prior-review-ledger": "prior-review-ledger";
-    "issue-review-focus": "issue-review-focus";
-  }>;
-  source: z.ZodString;
-  text: z.ZodString;
+        trivial: "trivial";
+        "docs-only": "docs-only";
+        full: "full";
+      }>>;
+    }, z.core.$strip>>;
+  }, z.core.$strip>;
 }, z.core.$strict>;
-type ReviewPromptSection = z.infer<typeof reviewPromptSectionSchema>;
-type ReviewPromptSectionProvenance = ReviewPromptSection["provenance"];
-declare const reviewPromptSectionsSchema: z.ZodArray<z.ZodObject<{
-  provenance: z.ZodEnum<{
-    "prior-review-ledger": "prior-review-ledger";
-    "issue-review-focus": "issue-review-focus";
-  }>;
-  source: z.ZodString;
-  text: z.ZodString;
-}, z.core.$strict>>;
-//#endregion
-//#region src/review-ladder-policy.d.ts
-type ReviewFindingSeverity = "critical" | "high" | "medium" | "low" | "unknown";
-type ReviewFindingCategory = "correctness" | "safety" | "coordination" | "maintainability" | "unknown";
-declare const REVIEW_SEVERITIES: readonly ["critical", "high", "medium", "low", "unknown"];
-declare const resolveReviewFindingSeverity: (priority?: string) => ReviewFindingSeverity;
-declare const resolveReviewFindingCategory: (category?: string) => ReviewFindingCategory;
-declare const FINDING_DISPOSITIONS: readonly ["open", "fixed-in-thread", "follow-up-filed", "waived", "stale-repeat", "rerun-noise"];
-type FindingDisposition = (typeof FINDING_DISPOSITIONS)[number];
-interface ReviewFindingAttributes {
-  blockingAfterCap?: boolean;
-  category?: string;
-  citedSpan?: string;
-  file?: string;
-  prescribedAction?: string;
-  priority?: string;
-  supersedes?: {
-    file?: string;
-    title: string;
-  };
-  title: string;
+type FactoryProjectProfile = z.infer<typeof factoryProjectProfileSchema>;
+declare const resolveFactoryRepository: (profile?: Pick<FactoryProjectProfile, "repository"> | undefined) => string;
+interface LoadProjectProfileInput {
+  cwd?: string;
+  profilePath?: string;
 }
-type BlockingResolvableFinding = Pick<ReviewFindingAttributes, "blockingAfterCap" | "category" | "priority">;
-declare const resolveFindingBlocking: (finding: BlockingResolvableFinding, disposition?: FindingDisposition) => boolean;
-interface ReviewLadderPolicy {
-  gate: {
-    cap: number;
-  };
-  interior: {
-    cap: number;
-  };
+interface LoadProjectProfileResult {
+  path: string;
+  profile: FactoryProjectProfile;
 }
-declare const resolveReviewLadderPolicy: () => ReviewLadderPolicy;
+declare function loadProjectProfile(input?: LoadProjectProfileInput): LoadProjectProfileResult;
 //#endregion
-//#region src/review-ladder-ledger.d.ts
-type LadderCycleStage = "interior" | "gate";
-interface LadderCycleRef {
-  cycle: number;
-  stage: LadderCycleStage;
-}
-type LadderFindingReport = ReviewFindingAttributes;
-type DeclarableFindingDisposition = Exclude<FindingDisposition, "open" | "stale-repeat" | "rerun-noise">;
-interface LadderDispositionDeclaration {
-  disposition: DeclarableFindingDisposition;
-  finding: {
-    file?: string;
-    title: string;
-  };
-  findingReport?: LadderFindingReport;
-  reference?: string;
-}
-interface FindingLedgerEntry extends ReviewFindingAttributes {
-  disposition: FindingDisposition;
-  firstFlagged: LadderCycleRef;
-  flagCount: number;
-  key: string;
-  lastFlagged: LadderCycleRef;
-  priorDisposition?: FindingDisposition;
-  reference?: string;
-  reopenedCount: number;
-  staleRepeatCount: number;
-}
-declare const findingKey: (finding: {
-  citedSpan?: string;
-  file?: string;
-  prescribedAction?: string;
-  title?: string;
-}) => string;
-declare const openLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
-declare const blockingLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
-declare const staleRepeatLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
-declare const inferFixedInThreadDispositions: (ledger: FindingLedgerEntry[], findings: readonly LadderFindingReport[], options?: {
-  sameHeadAsPriorCycle?: boolean;
-}) => LadderDispositionDeclaration[];
+//#region src/pr-verify-mode.d.ts
+/**
+ * The verification mode `pr:verify` resolved for a run.
+ *
+ * Canonically declared here rather than inside `pr-readiness/` so that modules
+ * on either side of that boundary — the readiness proof shape and the durable
+ * check-run payload — can name the same union without importing each other.
+ */
+type ResolvedPrVerifyMode = "docs-only" | "trivial" | "full";
 //#endregion
-//#region src/review-ladder.d.ts
-type ReviewLadderExecutedStage = "interior" | "gate";
-interface LadderSessionAttribution {
-  orchestrationMode?: "autonomous" | "manual";
-  resumedSession?: boolean;
-  runtime?: string;
-  sessionId?: string;
-}
-interface LadderUsageReport {
-  estimatedCostUsd?: number;
-  source?: string;
-  totalTokens?: number;
-}
-interface ReviewLadderCycle {
-  dispositions?: LadderDispositionDeclaration[];
-  engine?: string;
-  findings: LadderFindingReport[];
-  identity?: {
-    headSha: string;
-    patchId: string;
-  };
-  model?: string;
-  correlatedRerun?: boolean;
-  session?: LadderSessionAttribution;
-  stage: LadderCycleStage;
-  usage?: LadderUsageReport;
-}
-interface LadderInteriorCapTransition {
-  cap: number;
-  kind: "interior-cap-reached";
-}
-interface LadderGateCapTransition {
-  blockingFindings: string[];
-  cap: number;
-  kind: "gate-cap-exhausted";
+//#region src/pr-verify-status.d.ts
+type CommitStatusState = "failure" | "pending" | "success";
+interface PostCommitStatusInput {
+  context?: string;
+  cwd: string;
+  description: string;
+  owner: string;
+  repo: string;
+  sha: string;
+  state: CommitStatusState;
+  /**
+   * Drop this mirror's own failure diagnostic because the caller has already
+   * reported the same cause. Set only on the pre-push path, where the status
+   * POST 422s for exactly the reason the pre-push notice gives and a trailing
+   * "unable to post ... status" line would put back the false-defect reading
+   * that notice exists to remove (#316).
+   *
+   * Deliberately a field on the request rather than a second, quieter poster:
+   * an injected `PostCommitStatus` double sees the flag, so the branch is
+   * assertable instead of collapsing to the same closure under test.
+   */
+  suppressFailureDiagnostic?: boolean;
+  targetUrl: string;
 }
-type LadderForcedTransition = LadderGateCapTransition | LadderInteriorCapTransition;
-interface LadderRunInteriorCycleAction {
-  cycle: number;
-  kind: "run-interior-cycle";
+type PostCommitStatus = (input: PostCommitStatusInput) => void;
+//#endregion
+//#region src/user-config.d.ts
+declare const githubAppConfigSchema: z.ZodObject<{
+  appId: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+  installationId: z.ZodOptional<z.ZodNumber>;
+  privateKeyPath: z.ZodString;
+}, z.core.$strip>;
+type GithubAppConfig = z.infer<typeof githubAppConfigSchema>;
+declare const factoryUserConfigSchema: z.ZodObject<{
+  githubApp: z.ZodOptional<z.ZodObject<{
+    appId: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+    installationId: z.ZodOptional<z.ZodNumber>;
+    privateKeyPath: z.ZodString;
+  }, z.core.$strip>>;
+  hqAllowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+  hqIngestCredentials: z.ZodOptional<z.ZodObject<{
+    clientIdRef: z.ZodString;
+    clientSecretRef: z.ZodString;
+  }, z.core.$strip>>;
+  schemaVersion: z.ZodLiteral<2>;
+}, z.core.$strip>;
+type FactoryUserConfig = z.infer<typeof factoryUserConfigSchema>;
+interface LoadUserConfigResult {
+  path: string;
+  config: FactoryUserConfig;
+  ignoredKeys?: string[];
 }
-type LadderGateNextAction = {
-  cycle: number;
-  kind: "run-gate-cycle";
-} | {
-  kind: "accept-nonblocking-findings";
-} | {
-  kind: "escalate-to-triage";
-} | {
-  kind: "ready-for-human";
-};
-type LadderPosition = {
-  forcedTransition?: LadderGateCapTransition;
-  nextAction: LadderGateNextAction;
-  stage: "gate";
-} | {
-  forcedTransition?: LadderInteriorCapTransition;
-  nextAction: {
-    kind: "advance-to-gate";
-  };
-  stage: "interior-complete";
-} | {
-  forcedTransition?: never;
-  nextAction: LadderRunInteriorCycleAction;
-  stage: "interior";
+//#endregion
+//#region src/github-check-runs.d.ts
+declare const FACTORY_CHECK_NAMES: {
+  readonly "pr-ready": "patronage-factory/pr-ready";
+  readonly "pr-verify": "patronage-factory/pr-verify";
 };
-type LadderNextAction = LadderPosition["nextAction"];
-type ReviewLadderStage = LadderPosition["stage"];
-interface ReviewLadderStageEvent {
-  cycle: number;
-  cyclesToClean?: number;
-  engine?: string;
-  findingsSummary: {
-    blocking: number;
-    bySeverity: Record<ReviewFindingSeverity, number>;
-    flagged: number;
-    open: number;
-    staleRepeats: number;
-  };
-  forcedTransition?: LadderForcedTransition["kind"];
-  model?: string;
-  payloadVersion: 1;
-  session?: LadderSessionAttribution;
-  stage: ReviewLadderExecutedStage;
-  type: "review-ladder-stage";
-  usage?: LadderUsageReport;
-}
-interface LadderDiagnostic {
-  code: "interior-cycles-unrecorded";
-  message: string;
+type FactoryCheckGate = keyof typeof FACTORY_CHECK_NAMES;
+interface PublishFactoryCheckInput {
+  conclusion?: "failure" | "success";
+  cwd: string;
+  gate: FactoryCheckGate;
+  /**
+   * HQ lane-permalink base (`<origin>/lanes/by-ref`). When present, the check
+   * run's Details link deep-links to the HQ lane page instead of the PR-ledger
+   * fallback. Derive it from the repository profile via
+   * `hqLaneRefBaseUrlFromProfile` — the same source as the HQ gate sink.
+   */
+  hqLaneBaseUrl?: string;
+  owner: string;
+  pr?: number;
+  proof: unknown;
+  repo: string;
+  sha: string;
+  status?: "completed" | "in_progress";
 }
-type ReviewLadderEvaluation = LadderPosition & {
-  cycleCounts: {
-    gate: number;
-    interior: number;
+interface CheckRunDependencies {
+  fetch?: typeof fetch;
+  githubApp?: GithubAppConfig;
+  now?: () => number;
+  postCommitStatus?: PostCommitStatus;
+  resolveDetailsUrl?: (input: PublishFactoryCheckInput) => Promise<string> | string;
+  /**
+   * Bounded retry for the check-run POST. GitHub answers 422 for a head SHA it
+   * has not seen yet, which is the normal state when `pr:verify` runs before
+   * the branch is pushed, and is also briefly true right after a push.
+   */
+  retry?: {
+    attempts: number;
+    budgetMs?: number;
+    delayMs: number;
   };
-  diagnostics: LadderDiagnostic[];
-  event?: ReviewLadderStageEvent;
-  ledger: FindingLedgerEntry[];
-  unmatchedDispositions: LadderDispositionDeclaration[];
-};
-interface EvaluateReviewLadderInput {
-  cycles: ReviewLadderCycle[];
-  policy: ReviewLadderPolicy;
+  /** Injectable delay for the bounded retry (tests only). */
+  sleep?: (ms: number) => Promise<void>;
+  /** Overrides GITHUB_PUBLISH_TIMEOUT_MS for the App fetch calls (tests only). */
+  timeoutMs?: number;
 }
-declare const evaluateReviewLadder: ({
-  cycles,
-  policy
-}: EvaluateReviewLadderInput) => ReviewLadderEvaluation;
+/**
+ * Publish a factory check run and *wait* for it, so a caller that has just made
+ * the head SHA visible on GitHub (pushed the branch, created the PR) can make
+ * the proof reliably present for that SHA before it returns (#247).
+ *
+ * Never throws and never posts a commit-status fallback: the commit status is a
+ * human-readable mirror, not a proof surface, so a caller that needs an
+ * App-verified check run must be told plainly whether it got one. Returns
+ * `true` only when the App-owned check run landed.
+ *
+ * "Landed" means GitHub serves it, not that the POST was accepted (#520). On
+ * PR #519 the POST was accepted, `pr:ready` reported ready and armed, and the
+ * source-pinned required check read `in_progress` across three runs — so GitHub
+ * never scheduled the merge and emitted no rollup row saying why. Arming
+ * already refuses to infer its outcome from the invocation and reads the pull
+ * request back (`arm-auto-merge.ts`); publication now does the same.
+ *
+ * "Landed" is judged against every run of the name from the pinned App, not
+ * against the one GitHub collapses to (#524): the newest must be *this* run, in
+ * the status and conclusion that were published, and no run of the name may
+ * still be unfinished. A surviving `in_progress` run blocks the required check
+ * on its own, so confirming past it would report success on a pull request
+ * GitHub will never merge. One read, no polling: an unconfirmed publication
+ * returns `false`, which `pr:ready` already turns into a notice and an
+ * idempotent re-dispatch.
+ *
+ * Confirmation is a point-in-time read, deliberately: a later publication for
+ * the same name changes the answer — a completed one by becoming the newest, an
+ * unfinished one by holding the check open beside this verdict rather than
+ * replacing it — and every remaining writer publishes once, as the last thing
+ * its invocation does. No retry, no poll, no re-confirm.
+ */
+declare function ensureFactoryCheckRunPublished(input: PublishFactoryCheckInput, dependencies?: CheckRunDependencies & {
+  onDiagnostic?: (message: string) => void;
+}): Promise<boolean>;
 //#endregion
-//#region src/pr-readiness/ladder-proof-state.d.ts
-interface PrReviewLadderState {
-  cycles: ReviewLadderCycle[];
+//#region src/merge-freeze.d.ts
+declare const MERGE_FREEZE_CHECK_NAME = "patronage-factory/merge-freeze";
+declare const MERGE_FREEZE_APP_SLUG = "patronage-factory";
+declare const mergeFreezeStateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  active: z.ZodLiteral<true>;
+  generationId: z.ZodNumber;
+  headSha: z.ZodString;
+  outcome: z.ZodEnum<{
+    active: "active";
+    stale: "stale";
+  }>;
+  reason: z.ZodString;
+  recordedAt: z.ZodISODateTime;
+  schemaVersion: z.ZodLiteral<1>;
+}, z.core.$strip>, z.ZodObject<{
+  active: z.ZodLiteral<false>;
+  clearRationale: z.ZodOptional<z.ZodString>;
+  generationId: z.ZodNumber;
+  headSha: z.ZodString;
+  outcome: z.ZodLiteral<"inactive">;
+  reason: z.ZodString;
+  recordedAt: z.ZodISODateTime;
+  schemaVersion: z.ZodLiteral<1>;
+}, z.core.$strip>], "active">;
+type MergeFreezeState = z.infer<typeof mergeFreezeStateSchema>;
+/**
+ * The write side of this contract lives in the generated merge-target push
+ * Verify workflow (#356, ADR 0016 as amended; #429): it is the ONLY producer of
+ * `patronage-factory/merge-freeze` generations. Its emitted `output.text`
+ * payload must parse under this exact reader schema, which is what the
+ * workflow's own tests assert through this export.
+ */
+declare function validateMergeFreezeState(value: unknown): MergeFreezeState;
+interface MergeFreezeStoreInput {
+  cwd: string;
+  headSha: string;
+  repository: CheckoutRepository;
 }
-interface OpenCycleState {
-  autoBlockingFindings: number;
-  blockingEntries: ReviewFindingAttributes[];
-  openEntries: ReviewFindingAttributes[];
-  staleRepeatFindings?: number;
+interface MergeFreezeStore {
+  read: (input: MergeFreezeStoreInput) => unknown;
 }
-interface ReviewLadderSummaryState {
-  cycleCounts: {
-    gate: number;
-    interior: number;
-  };
-  forcedTransition?: LadderForcedTransition["kind"];
-  nextAction: LadderNextAction["kind"];
-  stage: ReviewLadderStage;
+/**
+ * The run identity that proves a generation is settling because it is running.
+ */
+interface RunningMergeFreezeWitness {
+  /** The base tip the running generation was created on. */
+  headSha: string;
+  /** The running `patronage-factory/merge-freeze` check-run id. */
+  runId: number;
 }
-interface ReviewLadderSnapshot {
-  cycleState: OpenCycleState;
-  evaluation: ReviewLadderEvaluation;
-  ledger: FindingLedgerEntry[];
-  policyGateCap: number;
-  summary: ReviewLadderSummaryState;
+/**
+ * The evidence that a generation is settling because it is still owed (#521).
+ */
+interface AwaitedMergeFreezeWitness {
+  /** The base tip whose generation is awaited. */
+  headSha: string;
+  /** The immediate parent whose settled generation proves the writer runs. */
+  parentSha: string;
+  /** The source-pinned hosted verify run that owes the generation. */
+  verifyRunId: number;
+  /** That run's status. A completed run owes nothing, so it is not settling. */
+  verifyStatus: "in_progress" | "queued";
 }
-type ReviewEpochMode = {
-  kind: "ladder";
-  ladder: PrReviewLadderState;
-  snapshot?: ReviewLadderSnapshot;
+/**
+ * The two settling phases, each with the witness that proves it (#890).
+ *
+ * `phase` replaces an optional `running` field that made one situation two:
+ * the field's presence, not the situation, decided how readers behaved. Each
+ * phase now carries exactly the witness its own rule needs.
+ */
+type SettlingMergeFreezeGeneration = {
+  kind: "settling";
+  phase: "running-generation";
+  reason: string;
+  witness: RunningMergeFreezeWitness;
 } | {
-  kind: "declared-window";
+  kind: "settling";
+  phase: "awaiting-generation";
+  reason: string;
+  witness: AwaitedMergeFreezeWitness;
 };
-//#endregion
-//#region src/pr-readiness/review-proof-types.d.ts
-type PrReviewKind = "correctness" | "security";
-type PrReviewMode = PrReviewKind | "all";
-type PrReviewOutcome = "passed" | "failed" | "error";
-interface PrReviewStageResolution {
-  model: string;
-  sessionId: string;
-}
-//#endregion
-//#region src/pr-readiness/review-proof-shape.d.ts
-interface PrReviewFinding extends ReviewFindingAttributes {
-  body: string;
-  category?: ReviewFindingCategory;
-  line?: number;
-  protocolFinding?: true;
+/**
+ * The freeze generation as a readiness decision needs to see it (#477).
+ *
+ * `read` below collapses every situation short of a verdict into one refusal,
+ * because merge time treats all of them as "do not merge". Readiness
+ * distinguishes them: a settled generation is the writer's verdict, a
+ * **settling** one is the window between a merge landing and its merge-target
+ * Verify completing, and an **unreadable** one is ambiguous, malformed,
+ * foreign-App, or unavailable state. Same selection, same pinned App, same
+ * `started_at` ordering — only the reporting is finer.
+ */
+type MergeFreezeGeneration = {
+  kind: "settled";
+  state: MergeFreezeState;
+} | SettlingMergeFreezeGeneration | {
+  kind: "unreadable";
+  reason: string;
+};
+/** A merge-freeze reader that can also report the settle window (#477). */
+interface MergeFreezeAuthority extends MergeFreezeStore {
+  readGeneration: (input: MergeFreezeStoreInput) => MergeFreezeGeneration;
 }
-interface PrReviewResult {
-  kind: PrReviewKind;
-  startedAt: string;
-  endedAt: string;
-  durationMs: number;
-  model?: string;
-  producer?: string;
-  rung?: EvidenceReviewRung;
-  sessionId?: string;
-  outcome: PrReviewOutcome;
-  issuesFlagged: number;
-  summary: string;
-  findings: PrReviewFinding[];
-  typedVerdict?: boolean;
-  verdictSource?: "footer" | "recovered";
-  promptSections?: ReviewPromptSection[];
+interface GitHubCheckRunMergeFreezeApi {
+  list: (input: MergeFreezeStoreInput & {
+    name: string;
+  }) => unknown;
+  parent?: (input: MergeFreezeStoreInput) => unknown;
 }
-interface PrReviewProof {
-  schemaVersion: 2;
-  findingProvenanceVersion: 1;
-  base: string;
-  headSha: string;
-  patchId: string;
-  reviewCycle?: number;
-  maxReviewCycles?: number;
-  changedFiles: string[];
-  cleanedPaths: string[];
-  ladder?: PrReviewLadderState;
-  reviewRequirement?: {
-    reason: "no-applicable-mode" | "faithful-merge";
-    status: "not-required";
-  };
-  reviews: PrReviewResult[];
+declare function createGitHubCheckRunMergeFreezeStore(api: GitHubCheckRunMergeFreezeApi): MergeFreezeAuthority;
+//#endregion
+//#region src/pr-proof-io.d.ts
+interface ProofDescriptor<T> {
+  label: string;
+  defaultPath: string;
+  schemaVersion: number;
+  parse: (raw: unknown) => T;
 }
 //#endregion
 //#region src/pr-readiness/readiness-ledger.d.ts
-declare const SCHEMA_VERSION = 1;
+/**
+ * Ledger schema version 2 (#894): `verification` is a tagged union on
+ * `prVerify` and `externalChecks` no longer echoes `inScope`. Version 1
+ * ledgers are not read — the pre-1.0 posture keeps one shape per contract, so
+ * there is no compat reader here.
+ */
+declare const SCHEMA_VERSION = 2;
 declare const READINESS_REPAIR_CODES: readonly ["undraft-pr", "await-post-undraft-checks"];
 declare const readinessRepairSchema: z.ZodObject<{
   action: z.ZodString;
@@ -1315,7 +1360,6 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       review: "review";
       verify: "verify";
     }>;
-    inScope: z.ZodBoolean;
     name: z.ZodString;
     reason: z.ZodOptional<z.ZodString>;
     scope: z.ZodOptional<z.ZodObject<{
@@ -1423,9 +1467,9 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       reviewedHeadSha: z.ZodOptional<z.ZodString>;
       reviewedPatchId: z.ZodOptional<z.ZodString>;
       status: z.ZodEnum<{
-        blocked: "blocked";
         "not-required": "not-required";
         stale: "stale";
+        blocked: "blocked";
         current: "current";
         missing: "missing";
       }>;
@@ -1435,28 +1479,37 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       reviewedHeadSha: z.ZodOptional<z.ZodString>;
       reviewedPatchId: z.ZodOptional<z.ZodString>;
       status: z.ZodEnum<{
-        blocked: "blocked";
         "not-required": "not-required";
         stale: "stale";
+        blocked: "blocked";
         current: "current";
         missing: "missing";
       }>;
     }, z.core.$strip>>;
   }, z.core.$strip>;
-  schemaVersion: z.ZodLiteral<1>;
-  verification: z.ZodObject<{
+  schemaVersion: z.ZodLiteral<2>;
+  verification: z.ZodDiscriminatedUnion<[z.ZodObject<{
     command: z.ZodLiteral<"patronage-factory pr:verify">;
-    docsOnlyDeltaAccepted: z.ZodOptional<z.ZodBoolean>;
-    docsOnlyVerifiedHeadSha: z.ZodOptional<z.ZodString>;
-    prVerify: z.ZodEnum<{
-      stale: "stale";
-      passed: "passed";
-      missing: "missing";
-    }>;
-    trivialDeltaAccepted: z.ZodOptional<z.ZodBoolean>;
-    trivialVerifiedHeadSha: z.ZodOptional<z.ZodString>;
+    prVerify: z.ZodLiteral<"missing">;
+  }, z.core.$strict>, z.ZodObject<{
+    command: z.ZodLiteral<"patronage-factory pr:verify">;
+    prVerify: z.ZodLiteral<"stale">;
+    verifiedHeadSha: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    command: z.ZodLiteral<"patronage-factory pr:verify">;
+    prVerify: z.ZodLiteral<"passed-via-head">;
+    verifiedHeadSha: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    command: z.ZodLiteral<"patronage-factory pr:verify">;
+    docsOnlyVerifiedHeadSha: z.ZodString;
+    prVerify: z.ZodLiteral<"docs-only-delta">;
     verifiedHeadSha: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>;
+  }, z.core.$strict>, z.ZodObject<{
+    command: z.ZodLiteral<"patronage-factory pr:verify">;
+    prVerify: z.ZodLiteral<"trivial-delta">;
+    trivialVerifiedHeadSha: z.ZodString;
+    verifiedHeadSha: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>], "prVerify">;
 }, z.core.$strip>;
 type ReadinessRepair = z.infer<typeof readinessRepairSchema>;
 type ReadinessStatus = "ready" | "blocked";
@@ -2392,7 +2445,6 @@ interface RequiredCheckOutcome {
   name: string;
   checkType: EvidenceCheckType;
   status: "satisfied" | "unmet" | "out-of-scope";
-  inScope: boolean;
   scopeReason: string;
   scope?: RequiredCheckScope;
   reason?: string;
@@ -2415,9 +2467,9 @@ declare const loadEvidenceEnvelopes: (cwd: string) => LoadedEvidenceEnvelope[];
 //#region src/review-proof-applicability.d.ts
 declare const REVIEW_STATUS_VALUES: readonly ["not-required", "current", "stale", "missing", "blocked"];
 declare const reviewStatusSchema: z.ZodEnum<{
-  blocked: "blocked";
   "not-required": "not-required";
   stale: "stale";
+  blocked: "blocked";
   current: "current";
   missing: "missing";
 }>;
@@ -4155,30 +4207,42 @@ declare const evaluateReadiness: (input: EvaluationInput) => {
     reviews: {
       correctness: {
         required: boolean;
-        status: "blocked" | "not-required" | "stale" | "current" | "missing";
+        status: "not-required" | "stale" | "blocked" | "current" | "missing";
         reviewedHeadSha?: string | undefined;
         reviewedPatchId?: string | undefined;
       };
       security?: {
         required: boolean;
-        status: "blocked" | "not-required" | "stale" | "current" | "missing";
+        status: "not-required" | "stale" | "blocked" | "current" | "missing";
         reviewedHeadSha?: string | undefined;
         reviewedPatchId?: string | undefined;
       } | undefined;
     };
-    schemaVersion: 1;
+    schemaVersion: 2;
     verification: {
       command: "patronage-factory pr:verify";
-      prVerify: "stale" | "passed" | "missing";
-      docsOnlyDeltaAccepted?: boolean | undefined;
-      docsOnlyVerifiedHeadSha?: string | undefined;
-      trivialDeltaAccepted?: boolean | undefined;
-      trivialVerifiedHeadSha?: string | undefined;
+      prVerify: "missing";
+    } | {
+      command: "patronage-factory pr:verify";
+      prVerify: "stale";
+      verifiedHeadSha: string;
+    } | {
+      command: "patronage-factory pr:verify";
+      prVerify: "passed-via-head";
+      verifiedHeadSha: string;
+    } | {
+      command: "patronage-factory pr:verify";
+      docsOnlyVerifiedHeadSha: string;
+      prVerify: "docs-only-delta";
+      verifiedHeadSha?: string | undefined;
+    } | {
+      command: "patronage-factory pr:verify";
+      prVerify: "trivial-delta";
+      trivialVerifiedHeadSha: string;
       verifiedHeadSha?: string | undefined;
     };
     externalChecks?: {
       checkType: "review" | "verify";
-      inScope: boolean;
       name: string;
       scopeReason: string;
       status: "satisfied" | "unmet" | "out-of-scope";
@@ -4676,4 +4740,4 @@ interface CreateProgramOptions {
 declare function createProgram(options?: CreateProgramOptions): Command;
 declare function run(argv?: string[]): Promise<void>;
 //#endregion
-export { type AppendFactoryTraceEventResult, type AssembledReviewPrompt, type BatteryCommandDisposition, type BatteryDisposition, type BoundaryCheckArgs, type BoundaryCheckDependencies, type BoundaryCheckProofRecord, type BuildEpicStructureEventInput, type CloudflareAccessServiceToken, type CompletedFactoryCheckSnapshot, CreateProgramOptions, DEFAULT_DEMAND_WAIVER_PATH, DEFAULT_FACTORY_REPOSITORY, DEFAULT_ROOT_SHARED_GLOBS, type DagDocument, type DemandWaiveArgs, type DemandWaiveDependencies, DemandWaiveRefusalError, type DemandWaiver, type DemandWaiverStore, EMPTY_TREE_OBJECT_HASH, EPIC_STRUCTURE_NODE_STATUSES, EPIC_STRUCTURE_SCHEMA_VERSION, type EpicStructureEvent, type EpicStructureGraphPayload, type EpicStructureNodeStatus, EpicStructureValidationError, type EvidenceEmitArgs, type EvidenceEmitDependencies, type EvidenceEmitResult, FACTORY_BASE_REF_ENV, FACTORY_CHANGED_FILES_ENV, FACTORY_CHANGED_FILES_FILE_ENV, type FactoryCliInvocation, FactoryCliInvocationSchema, type FactoryPrStatusCheckName, type FactoryPrStatusSources, type FactoryProjectProfile, type FactoryTraceDiagnostic, type FactoryTraceEnvelope, type FactoryTraceEvent, type FindingDisposition, type FindingLedgerEntry, type FollowUpAction, FollowUpActionSchema, type ImpactScopeDecision, type ImpactScopeSurface, type IssueReviewFocus, type LadderDispositionDeclaration, MERGE_FREEZE_APP_SLUG, MERGE_FREEZE_CHECK_NAME, type MergeFreezeState, type PlanFactoryPrStatusHudInput, type PrPublishArgs, type PrPublishDependencies, PrPublishFollowUpError, type PrPublishFollowUpOutcome, type PrPublishHandoff, type PrPublishResult, type PrReadyArgs, type PrReadyProof, type PresentFactoryPrStatusHudDependencies, type PresentFactoryPrStatusHudInput, type PreviewDisposition, type PreviewLifecyclePlan, type PreviewTargetPlan, type PublishEpicStructureArgs, type PublishEpicStructureResult, type PublishFollowUpPlan, REVIEW_FOCUS_SECTION, type ReadFactoryPrStatusSourcesDependencies, type ReadFactoryPrStatusSourcesInput, type RefreshFactoryPrStatusHudInput, type RenderFactoryPrStatusHudInput, type ReviewGateNotRequiredProof, type ReviewGateTraceIdentity, type ReviewLadderCycle, type ReviewLadderEvaluation, type ReviewLadderPolicy, type ReviewLadderStageEvent, type ReviewLadderTraceIdentity, type ReviewPromptSection, type ReviewPromptSectionProvenance, type ScanFactoryTraceDiagnosticsOptions, type ScanFactoryTraceOptions, type ScanFactoryTraceResult, type ScopedOutCommand, type TraceMirrorDiagnostic, type TraceSink, type TraceWriteResult, type TraceWriteSinks, type VerificationBatteryPlan, type VerificationReuse, type VerificationRunContext, type VerificationRunContextInput, type WaivedDemand, WorkerCheckoutGuardError, type WorkerCloseoutLessonsTraceEvent, appendReviewLadderStageTraceEvent, appendWithTraceSinks, applyDemandWaiver, assembleReviewPrompt, assertFactoryPrStatusIdentity, assertWorkerCheckoutAllowed, authorizeDemandWaiver, batteryScopeSummaryLines, blockingLadderFindings, boundary_manifest_d_exports as boundaryManifest, boundary_review_proof_d_exports as boundaryReviewProof, buildEpicStructureEvent, buildEpicStructurePayload, buildEvidenceEnvelope, buildReviewGateNotRequiredTraceEvent, buildReviewLadderStageTraceEvent, comment_provenance_d_exports as commentProvenance, createLocalJsonlTraceSink, createProgram, createVerificationRunContext, doctorProjectProfile, epicStructureEventId, evaluateReviewLadder, evidenceEnvelopeFilename, findingKey, followUpFromArgv, impactStampScopeDecision, inferFixedInThreadDispositions, isProductionHqUrl, loadProjectProfile, normalizeIssueComments, openLadderFindings, planFactoryPrStatusHud, planPreviewLifecycle, planPublishFollowUp, planVerificationBattery, readiness_evaluation_d_exports as prReadinessEvaluation, external_evidence_d_exports as prReadinessExternalEvidence, pr_body_renderer_d_exports as prReadinessPrBodyRenderer, proof_identity_d_exports as prReadinessProofIdentity, review_proof_d_exports as prReadinessReviewProof, status_check_rollup_d_exports as prReadinessStatusChecks, verification_proof_d_exports as prReadinessVerificationProof, presentFactoryPrStatusHud, previewLifecycleTargets, publishEpicStructure, readDemandWaivers, readFactoryPrStatusSources, readPrReadyProof, readPrReviewProof, refreshFactoryPrStatusHud, refreshFactoryPrStatusHudSafely, renderFactoryPrStatusHud, resolveFactoryRepository, resolveFindingBlocking, resolveReviewFindingCategory, resolveReviewFindingSeverity, resolveReviewLadderPolicy, resolveTraceWriteSinks, reviewCycleStateFor, reviewFocusFromIssueBody, reviewPromptSectionSchema, reviewPromptSectionsSchema, run, runBoundaryCheck, runDemandWaive, runEvidenceEmit, runPrPublish, runPrReady, runPrReview, runPrVerify, scanFactoryTraceDiagnostics, scanFactoryTraceEvents, selectWaiversForCandidate, staleRepeatLadderFindings, toFactoryTraceEnvelope, tryAppendReviewGateNotRequiredTraceEvent, tryAppendReviewLadderStageTraceEvent, validateBoundaryCheckProof, validateDagDocument, validateDemandWaiverStore, validateFactoryTraceEvent, validateMergeFreezeState, validatePrReadyProof, validatePrReviewProof, validatePrVerifyProof, validatePreviewLifecyclePlan, waivedDemandNotice, waivedDemandSchema, worktree_scratch_files_d_exports as worktreeScratchFiles };
+export { type AppendFactoryTraceEventResult, type AssembledReviewPrompt, type BatteryCommandDisposition, type BatteryDisposition, type BoundaryCheckArgs, type BoundaryCheckDependencies, type BoundaryCheckProofRecord, type BuildEpicStructureEventInput, type CloudflareAccessServiceToken, type CompletedFactoryCheckSnapshot, CreateProgramOptions, DEFAULT_DEMAND_WAIVER_PATH, DEFAULT_FACTORY_REPOSITORY, DEFAULT_ROOT_SHARED_GLOBS, type DagDocument, type DemandWaiveArgs, type DemandWaiveDependencies, DemandWaiveRefusalError, type DemandWaiver, type DemandWaiverStore, EMPTY_TREE_OBJECT_HASH, EPIC_STRUCTURE_NODE_STATUSES, EPIC_STRUCTURE_SCHEMA_VERSION, type EpicStructureEvent, type EpicStructureGraphPayload, type EpicStructureNodeStatus, EpicStructureValidationError, type EvidenceEmitArgs, type EvidenceEmitDependencies, type EvidenceEmitResult, FACTORY_BASE_REF_ENV, FACTORY_CHANGED_FILES_ENV, FACTORY_CHANGED_FILES_FILE_ENV, type FactoryCliInvocation, FactoryCliInvocationSchema, type FactoryPrStatusCheckName, type FactoryPrStatusSources, type FactoryProjectProfile, type FactoryTraceDiagnostic, type FactoryTraceEnvelope, type FactoryTraceEvent, type FindingDisposition, type FindingLedgerEntry, type FollowUpAction, FollowUpActionSchema, type GitHubCheckRunMergeFreezeApi, type ImpactScopeDecision, type ImpactScopeSurface, type IssueReviewFocus, type LadderDispositionDeclaration, MERGE_FREEZE_APP_SLUG, MERGE_FREEZE_CHECK_NAME, type MergeFreezeAuthority, type MergeFreezeGeneration, type MergeFreezeState, type MergeFreezeStoreInput, type PlanFactoryPrStatusHudInput, type PrPublishArgs, type PrPublishDependencies, PrPublishFollowUpError, type PrPublishFollowUpOutcome, type PrPublishHandoff, type PrPublishResult, type PrReadyArgs, type PrReadyProof, type PresentFactoryPrStatusHudDependencies, type PresentFactoryPrStatusHudInput, type PreviewDisposition, type PreviewLifecyclePlan, type PreviewTargetPlan, type PublishEpicStructureArgs, type PublishEpicStructureResult, type PublishFollowUpPlan, REVIEW_FOCUS_SECTION, type ReadFactoryPrStatusSourcesDependencies, type ReadFactoryPrStatusSourcesInput, type RefreshFactoryPrStatusHudInput, type RenderFactoryPrStatusHudInput, type ReviewGateNotRequiredProof, type ReviewGateTraceIdentity, type ReviewLadderCycle, type ReviewLadderEvaluation, type ReviewLadderPolicy, type ReviewLadderStageEvent, type ReviewLadderTraceIdentity, type ReviewPromptSection, type ReviewPromptSectionProvenance, type ScanFactoryTraceDiagnosticsOptions, type ScanFactoryTraceOptions, type ScanFactoryTraceResult, type ScopedOutCommand, type TraceMirrorDiagnostic, type TraceSink, type TraceWriteResult, type TraceWriteSinks, type VerificationBatteryPlan, type VerificationReuse, type VerificationRunContext, type VerificationRunContextInput, type WaivedDemand, WorkerCheckoutGuardError, type WorkerCloseoutLessonsTraceEvent, appendReviewLadderStageTraceEvent, appendWithTraceSinks, applyDemandWaiver, assembleReviewPrompt, assertFactoryPrStatusIdentity, assertWorkerCheckoutAllowed, authorizeDemandWaiver, batteryScopeSummaryLines, blockingLadderFindings, boundary_manifest_d_exports as boundaryManifest, boundary_review_proof_d_exports as boundaryReviewProof, buildEpicStructureEvent, buildEpicStructurePayload, buildEvidenceEnvelope, buildReviewGateNotRequiredTraceEvent, buildReviewLadderStageTraceEvent, comment_provenance_d_exports as commentProvenance, createGitHubCheckRunMergeFreezeStore, createLocalJsonlTraceSink, createProgram, createVerificationRunContext, doctorProjectProfile, epicStructureEventId, evaluateReviewLadder, evidenceEnvelopeFilename, findingKey, followUpFromArgv, impactStampScopeDecision, inferFixedInThreadDispositions, isProductionHqUrl, loadProjectProfile, normalizeIssueComments, openLadderFindings, planFactoryPrStatusHud, planPreviewLifecycle, planPublishFollowUp, planVerificationBattery, readiness_evaluation_d_exports as prReadinessEvaluation, external_evidence_d_exports as prReadinessExternalEvidence, pr_body_renderer_d_exports as prReadinessPrBodyRenderer, proof_identity_d_exports as prReadinessProofIdentity, review_proof_d_exports as prReadinessReviewProof, status_check_rollup_d_exports as prReadinessStatusChecks, verification_proof_d_exports as prReadinessVerificationProof, presentFactoryPrStatusHud, previewLifecycleTargets, publishEpicStructure, readDemandWaivers, readFactoryPrStatusSources, readPrReadyProof, readPrReviewProof, refreshFactoryPrStatusHud, refreshFactoryPrStatusHudSafely, renderFactoryPrStatusHud, resolveFactoryRepository, resolveFindingBlocking, resolveReviewFindingCategory, resolveReviewFindingSeverity, resolveReviewLadderPolicy, resolveTraceWriteSinks, reviewCycleStateFor, reviewFocusFromIssueBody, reviewPromptSectionSchema, reviewPromptSectionsSchema, run, runBoundaryCheck, runDemandWaive, runEvidenceEmit, runPrPublish, runPrReady, runPrReview, runPrVerify, scanFactoryTraceDiagnostics, scanFactoryTraceEvents, selectWaiversForCandidate, staleRepeatLadderFindings, toFactoryTraceEnvelope, tryAppendReviewGateNotRequiredTraceEvent, tryAppendReviewLadderStageTraceEvent, validateBoundaryCheckProof, validateDagDocument, validateDemandWaiverStore, validateFactoryTraceEvent, validateMergeFreezeState, validatePrReadyProof, validatePrReviewProof, validatePrVerifyProof, validatePreviewLifecyclePlan, waivedDemandNotice, waivedDemandSchema, worktree_scratch_files_d_exports as worktreeScratchFiles };