@patronage/software-factory 1.0.0-alpha.25 → 1.0.0-alpha.26

package/dist/index.d.ts

@@ -17,8 +17,8 @@ declare const boundaryManifestBaseSchema: z.ZodObject<{
   boundary: z.ZodString;
   closeout: z.ZodOptional<z.ZodObject<{
     review: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -36,8 +36,8 @@ declare const boundaryManifestBaseSchema: z.ZodObject<{
     issues: z.ZodArray<z.ZodNumber>;
     name: z.ZodString;
     review: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -46,8 +46,8 @@ declare const boundaryManifestSchema: z.ZodObject<{
   boundary: z.ZodString;
   closeout: z.ZodOptional<z.ZodObject<{
     review: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -65,8 +65,8 @@ declare const boundaryManifestSchema: z.ZodObject<{
     issues: z.ZodArray<z.ZodNumber>;
     name: z.ZodString;
     review: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -151,8 +151,8 @@ declare const boundaryReviewProofBaseSchema: z.ZodObject<{
   }>;
   producer: z.ZodString;
   rung: z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>;
   schemaVersion: z.ZodLiteral<1>;
@@ -195,8 +195,8 @@ declare const boundaryReviewProofSchema: z.ZodObject<{
   }>;
   producer: z.ZodString;
   rung: z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>;
   schemaVersion: z.ZodLiteral<1>;
@@ -2478,8 +2478,8 @@ declare const evidenceEnvelopeBaseSchema: z.ZodObject<{
   producer: z.ZodString;
   requestId: z.ZodOptional<z.ZodString>;
   rung: z.ZodOptional<z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>>;
   schemaVersion: z.ZodLiteral<1>;
@@ -2505,8 +2505,8 @@ declare const evidenceEnvelopeSchema: z.ZodObject<{
   producer: z.ZodString;
   requestId: z.ZodOptional<z.ZodString>;
   rung: z.ZodOptional<z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>>;
   schemaVersion: z.ZodLiteral<1>;
@@ -2726,8 +2726,8 @@ declare const boundaryCheckProofSchema: z.ZodObject<{
     wave: z.ZodString;
   }, z.core.$strip>>;
   demandedRung: z.ZodOptional<z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>>;
   epicIssue: z.ZodNumber;
@@ -2742,8 +2742,8 @@ declare const boundaryCheckProofSchema: z.ZodObject<{
     commentUrl: z.ZodOptional<z.ZodString>;
     producer: z.ZodString;
     rung: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
     sessionId: z.ZodOptional<z.ZodString>;
@@ -2759,8 +2759,8 @@ declare const boundaryCheckProofSchema: z.ZodObject<{
     value: z.ZodString;
   }, z.core.$strip>>;
   status: z.ZodEnum<{
-    blocked: "blocked";
     ready: "ready";
+    blocked: "blocked";
   }>;
 }, z.core.$strip>;
 type BoundaryCheckProofRecord = z.infer<typeof boundaryCheckProofSchema>;
@@ -3853,8 +3853,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     model: z.ZodString;
     tier: z.ZodEnum<{
       review: "review";
-      oracle: "oracle";
       delegate: "delegate";
+      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
@@ -3862,8 +3862,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   startedAt: z.ZodString;
   tier: z.ZodEnum<{
     review: "review";
-    oracle: "oracle";
     delegate: "delegate";
+    oracle: "oracle";
     workhorse: "workhorse";
     scout: "scout";
   }>;
@@ -3932,8 +3932,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     model: z.ZodString;
     tier: z.ZodEnum<{
       review: "review";
-      oracle: "oracle";
       delegate: "delegate";
+      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
@@ -3941,8 +3941,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   startedAt: z.ZodString;
   tier: z.ZodEnum<{
     review: "review";
-    oracle: "oracle";
     delegate: "delegate";
+    oracle: "oracle";
     workhorse: "workhorse";
     scout: "scout";
   }>;
@@ -4002,8 +4002,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
       model: z.ZodString;
       tier: z.ZodEnum<{
         review: "review";
-        oracle: "oracle";
         delegate: "delegate";
+        oracle: "oracle";
         workhorse: "workhorse";
         scout: "scout";
       }>;
@@ -4011,8 +4011,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     startedAt: z.ZodString;
     tier: z.ZodEnum<{
       review: "review";
-      oracle: "oracle";
       delegate: "delegate";
+      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
@@ -4061,11 +4061,11 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     engine: string;
     layerSource: "committedDefault" | "operatorSession" | "userConfig";
     model: string;
-    tier: "review" | "oracle" | "delegate" | "workhorse" | "scout";
+    tier: "review" | "delegate" | "oracle" | "workhorse" | "scout";
     fallbackTier?: "delegate" | undefined;
   };
   startedAt: string;
-  tier: "review" | "oracle" | "delegate" | "workhorse" | "scout";
+  tier: "review" | "delegate" | "oracle" | "workhorse" | "scout";
   tokenUsage: {
     source: "cursor-csv" | "codex-json" | "cursor-json" | "claude-json";
     status: "available";

package/dist/index.js

@@ -18,7 +18,7 @@ import { parse } from "yaml";
 import { promisify } from "node:util";
 import { FACTORY_PROOF_GATE_APP_ID, FACTORY_PROOF_GATE_STEP_NAME, GitHubApiError, mintInstallationToken, previewProofInventory, productionImpactTargetOutput, readVitestProfileDocument } from "@patronage/factory-ci";
 //#region package.json
-var version = "1.0.0-alpha.25";
+var version = "1.0.0-alpha.26";
 //#endregion
 //#region src/review-rungs.ts
 const EVIDENCE_REVIEW_RUNGS = [
@@ -18760,7 +18760,7 @@ const productionImpactSummaryLines = (decision) => decision.basis.classification
 //#endregion
 //#region src/commands/production-impact.ts
 function createProductionImpactCommand(output) {
-	return markCwdOptionDefault(new Command("production:impact").description("Classify production targets from an exact merge-push before/after diff").option("--before <sha>", "merge-push before commit SHA").option("--after <sha>", "merge-push after commit SHA").option("--cwd <path>", "repository working directory", collectCwdOption).option("--profile <path>", "path to the project profile JSON file").option("--github-output <path>", "append stable decision outputs to a GitHub Actions output file").option("--github-summary <path>", "append a human-readable decision to a GitHub Actions summary file").option("--json", "print the complete decision as JSON").action((options) => {
+	return markCwdOptionDefault(new Command("production:impact").description("Classify production targets from an exact merge-push before/after diff").option("--before <sha>", "merge-push before commit SHA").option("--after <sha>", "merge-push after commit SHA").option("--cwd <path>", "repository working directory", collectCwdOption).option("--profile <path>", "path to the project profile JSON file (default: software-factory.profile.json in --cwd)").option("--github-output <path>", "append stable decision outputs to a GitHub Actions output file").option("--github-summary <path>", "append a human-readable decision to a GitHub Actions summary file").option("--json", "print the complete decision as JSON").action((options) => {
 		const decision = runProductionImpact({
 			after: options.after,
 			before: options.before,

package/dist/review-prompts/security/SKILL.md

@@ -51,6 +51,7 @@ Load only matching references:
 | Crypto and randomness | Weak hashes, predictable random values, static IVs, ECB mode, timing-unsafe compares, unsigned tokens, or custom crypto protect security-sensitive data. |
 | Abuse controls | Sensitive or expensive operations such as login, MFA, invites, exports, password reset, billing, email, SMS, or paid API calls lack meaningful rate, quota, replay, or idempotency controls. |
 | CI and workflows | Workflow changes let untrusted or caller-controlled code, text, artifacts, caches, or actions reach privileged execution, secrets, write tokens, releases, packages, deployments, or sensitive runners. |
+| Infrastructure exposure | An infrastructure declaration publishes a service to the internet without a declared authentication mechanism. In an Alchemy stack, a Worker declaring `workersDev: true`, a `domain`, or `routes` must also declare its guard — Cloudflare Access, an auth secret binding, or an equivalent check inside the Worker — or carry a written reason in the change for why it is public. |
 
 ## Severity
 

package/dist/review-prompts/security/references/javascript-typescript.md

@@ -22,6 +22,7 @@ Use this when reviewing JavaScript, TypeScript, Node, React, Next.js, or browser
 | Path traversal | `path.join(root, userPath)` without realpath containment, archive extraction by entry name | Normalize and resolve real paths, verify containment, generate server-side filenames |
 | Webhook forgery | State-changing webhook parses JSON before verifying signature or skips timestamp/replay checks | Verify raw body signature, timestamp freshness, replay/idempotency, and provider secret before side effects |
 | Secrets exposure | Secrets in client components, `NEXT_PUBLIC_*`, serialized props, logs, or error responses | Server-only reads, redacted logs, safe error messages, no hardcoded production fallback |
+| Public Worker without auth | Alchemy `Cloudflare.Worker` gains `workersDev: true`, a `domain`, or a `routes` entry while its handler enforces no identity check | Cloudflare Access on the Worker (`access` prop or an Access application destination), an auth secret binding the handler verifies, or a written reason in the change for why the Worker is public |
 
 ## False-Positive Controls
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patronage/software-factory",
-  "version": "1.0.0-alpha.25",
+  "version": "1.0.0-alpha.26",
   "description": "Shared Patronage software factory CLI and project-profile validation tools",
   "license": "MIT",
   "repository": {
@@ -37,7 +37,7 @@
     "picomatch": "^4.0.5",
     "yaml": "^2.9.0",
     "zod": "4.4.3",
-    "@patronage/factory-ci": "1.0.0-alpha.25"
+    "@patronage/factory-ci": "1.0.0-alpha.26"
   },
   "devDependencies": {
     "@types/node": "24.13.3",