@patronage/software-factory 1.0.0-alpha.26 → 1.0.0-alpha.28

package/dist/schemas.d.ts

@@ -506,7 +506,15 @@ type ReadinessStatus = "ready" | "blocked";
 type ManagedReadinessLedger = z.infer<typeof managedReadinessLedgerSchema>;
 //#endregion
 //#region src/pr-verify-proof-contract.d.ts
-declare const SUPPORTED_PR_VERIFY_SCHEMA_VERSIONS: readonly [1, 2, 3, 4];
+/**
+ * The pr:verify proof versions a reader accepts: the current one only (#920
+ * item 1). #917 narrowed the pr:ready reader the same way. A pr:verify proof
+ * is per-candidate and short-lived — it is rewritten on every head — so no
+ * stored v1–v3 proof can outlive the release that drops it. Pre-1.0 posture
+ * applies: one current contract, no compat reader. A consumer on an older
+ * factory must adopt this release before HQ ingests its pr:verify proofs.
+ */
+declare const SUPPORTED_PR_VERIFY_SCHEMA_VERSIONS: readonly [4];
 type PrVerifySchemaVersion = (typeof SUPPORTED_PR_VERIFY_SCHEMA_VERSIONS)[number];
 interface PrVerifyCommandResult {
   command: string;
@@ -517,11 +525,11 @@ interface PrVerifyCommandResult {
    * mapping: a `notRequiredCommands` entry must name the target recorded HERE
    * for the same command, so a withholding cannot point at whichever released
    * target happens to be convenient. Absent for a command the profile does
-   * not scope, and for v1–v3 proofs, which predate the field.
+   * not scope.
    */
   impactTarget?: string;
   name: string;
-  scope: "always" | "docs-only" | "trivial" | "full";
+  scope: "docs-only" | "trivial" | "full";
 }
 interface PrVerifyExecutedCommand {
   command: string;
@@ -532,7 +540,7 @@ interface PrVerifyExecutedCommand {
   durationMs: number;
   exitCode: number;
   name: string;
-  scope: "always" | "docs-only" | "trivial" | "full";
+  scope: "docs-only" | "trivial" | "full";
 }
 /**
  * Epic #550 wave 3 (#430): a verification command the impact stamp proved this
@@ -551,8 +559,7 @@ interface PrVerifyNotRequiredCommand {
 }
 /**
  * Epic #758 (#762): a consumer package a stamp-scoped selection skipped, and
- * why. Bound to the proof's stamp identity — the field is v4-only (the same
- * window that can carry `impactStamp`) and refused when the proof records no
+ * why. Bound to the proof's stamp identity — refused when the proof records no
  * stamp. The factory does not write this list; consumers do.
  */
 interface PrVerifyNotDemandedRecord {
@@ -561,7 +568,7 @@ interface PrVerifyNotDemandedRecord {
 }
 interface PrVerifyProof {
   schemaVersion: PrVerifySchemaVersion;
-  authoringSession?: string;
+  authoringSession: string;
   base: string;
   baselineFullProofs?: {
     base: string;
@@ -604,7 +611,7 @@ interface PrVerifyProof {
   verificationCommands: PrVerifyCommandResult[];
 }
 declare const prVerifyProofSchema: z.ZodObject<{
-  authoringSession: z.ZodOptional<z.ZodString>;
+  authoringSession: z.ZodString;
   base: z.ZodString;
   baselineFullProofs: z.ZodOptional<z.ZodArray<z.ZodObject<{
     base: z.ZodString;
@@ -636,7 +643,6 @@ declare const prVerifyProofSchema: z.ZodObject<{
     name: z.ZodString;
     scope: z.ZodEnum<{
       trivial: "trivial";
-      always: "always";
       "docs-only": "docs-only";
       full: "full";
     }>;
@@ -697,7 +703,7 @@ declare const prVerifyProofSchema: z.ZodObject<{
   profilePath: z.ZodString;
   projectKey: z.ZodString;
   repository: z.ZodString;
-  schemaVersion: z.ZodNumber & z.ZodType<1 | 2 | 3 | 4, number, z.core.$ZodTypeInternals<1 | 2 | 3 | 4, number>>;
+  schemaVersion: z.ZodLiteral<4>;
   startedAt: z.ZodISODateTime;
   verificationCommands: z.ZodArray<z.ZodObject<{
     command: z.ZodString;
@@ -706,7 +712,6 @@ declare const prVerifyProofSchema: z.ZodObject<{
     name: z.ZodString;
     scope: z.ZodEnum<{
       trivial: "trivial";
-      always: "always";
       "docs-only": "docs-only";
       full: "full";
     }>;
@@ -848,8 +853,8 @@ declare const closeoutArtifactSchema: z.ZodObject<{
     }, z.core.$strict>;
     unit: z.ZodEnum<{
       boolean: "boolean";
-      count: "count";
       text: "text";
+      count: "count";
       tokens: "tokens";
       usd: "usd";
     }>;

package/dist/schemas.js

@@ -1014,9 +1014,7 @@ z.looseObject({
 *     skip this epic forbids.
 *
 * Rule 4 is scoped to `outcome: "passed"` because an ABORTED proof legitimately
-* records partial execution — the run stopped at the failing command. It is
-* also scoped to schemaVersion >= 4: `executedCommands` postdates v1–v3, so a
-* legacy proof that never recorded it is not making a false completeness claim.
+* records partial execution — the run stopped at the failing command.
 *
 * The check is one-directional on purpose. Every SELECTED command must be
 * accounted for, but `executedCommands` may legitimately carry MORE than the
@@ -1059,7 +1057,7 @@ const assertBatteryCompleteness = (proof, context) => {
 		});
 		seen.add(entry.name);
 	}
-	if (proof.outcome !== "passed" || proof.schemaVersion < 4) return;
+	if (proof.outcome !== "passed") return;
 	const disposed = new Set([...executed, ...seen]);
 	const undisposed = selected.filter((name) => !disposed.has(name));
 	if (undisposed.length > 0) context.addIssue({
@@ -1069,7 +1067,7 @@ const assertBatteryCompleteness = (proof, context) => {
 	});
 };
 /**
-* The stamp-authorization control: a passed v4 proof may only claim a command
+* The stamp-authorization control: a passed proof may only claim a command
 * was NOT REQUIRED if its own recorded stamp says so.
 *
 * `assertBatteryCompleteness` proves the two lists partition the selected
@@ -1092,8 +1090,8 @@ const assertBatteryCompleteness = (proof, context) => {
 *     provably released.
 *
 * The proof is one artifact and a determined forger controls all of it; this
-* is internal-coherence belt-and-braces in the same trust domain as the
-* version guards, and write-time truth stays `pr:verify`'s job.
+* is internal-coherence belt-and-braces in the same trust domain as the rest
+* of the proof, and write-time truth stays `pr:verify`'s job.
 *
 * The authorizing evidence is the proof's OWN `impactStamp` — the same stamp
 * `pr:verify` computed for this candidate's identity triple and recorded here,
@@ -1106,14 +1104,13 @@ const assertBatteryCompleteness = (proof, context) => {
 * self-contradictory stamp, an unclassified name, or an `affected` verdict all
 * fail the same way scoping itself would.
 *
-* Scoped to `outcome: "passed"` and schemaVersion >= 4 for the same reasons as
-* the completeness rule: an aborted run records partial execution, and a
-* legacy proof predates both fields, so neither is making a false completeness
+* Scoped to `outcome: "passed"` for the same reason as the completeness rule:
+* an aborted run records partial execution, so it makes no false completeness
 * claim.
 */
 const assertNotRequiredStampAuthorization = (proof, context) => {
 	const notRequired = proof.notRequiredCommands ?? [];
-	if (proof.outcome !== "passed" || proof.schemaVersion < 4 || notRequired.length === 0) return;
+	if (proof.outcome !== "passed" || notRequired.length === 0) return;
 	const { impactStamp } = proof;
 	if (impactStamp === void 0) {
 		context.addIssue({
@@ -1157,36 +1154,6 @@ const assertNotRequiredStampAuthorization = (proof, context) => {
 //#endregion
 //#region src/pr-verify-proof-rules.ts
 const assertPrVerifyProofRules = (proof, context) => {
-	if (proof.schemaVersion >= 4 && proof.authoringSession === void 0) context.addIssue({
-		code: "custom",
-		message: "schemaVersion 4 pr:verify proof requires authoringSession (the recorded authoring identity, or the `unknown` sentinel).",
-		path: ["authoringSession"]
-	});
-	if (proof.schemaVersion < 4 && proof.authoringSession !== void 0) context.addIssue({
-		code: "custom",
-		message: "authoringSession is a schemaVersion>=4 field; a v1–v3 pr:verify proof must not carry it.",
-		path: ["authoringSession"]
-	});
-	if (proof.schemaVersion < 4 && proof.impactStamp !== void 0) context.addIssue({
-		code: "custom",
-		message: "impactStamp is a schemaVersion>=4 field; a v1–v3 pr:verify proof must not carry it.",
-		path: ["impactStamp"]
-	});
-	if (proof.schemaVersion < 4 && proof.notRequiredCommands !== void 0) context.addIssue({
-		code: "custom",
-		message: "notRequiredCommands is a schemaVersion>=4 field; a v1–v3 pr:verify proof must not carry it.",
-		path: ["notRequiredCommands"]
-	});
-	if (proof.schemaVersion < 4 && proof.catchUpRecognition !== void 0) context.addIssue({
-		code: "custom",
-		message: "catchUpRecognition is a schemaVersion>=4 field; a v1–v3 pr:verify proof must not carry it.",
-		path: ["catchUpRecognition"]
-	});
-	if (proof.schemaVersion < 4 && proof.notDemandedRecords !== void 0) context.addIssue({
-		code: "custom",
-		message: "notDemandedRecords is a schemaVersion>=4 field; a v1–v3 pr:verify proof must not carry it.",
-		path: ["notDemandedRecords"]
-	});
 	if (proof.notDemandedRecords !== void 0 && proof.impactStamp === void 0) context.addIssue({
 		code: "custom",
 		message: "notDemandedRecords requires impactStamp; package-level not-demanded records are bound to the stamp identity.",
@@ -1195,14 +1162,15 @@ const assertPrVerifyProofRules = (proof, context) => {
 	assertBatteryCompleteness(proof, context);
 	assertNotRequiredStampAuthorization(proof, context);
 };
-//#endregion
-//#region src/pr-verify-proof-contract.ts
-const SUPPORTED_PR_VERIFY_SCHEMA_VERSIONS = [
-	1,
-	2,
-	3,
-	4
-];
+/**
+* The pr:verify proof versions a reader accepts: the current one only (#920
+* item 1). #917 narrowed the pr:ready reader the same way. A pr:verify proof
+* is per-candidate and short-lived — it is rewritten on every head — so no
+* stored v1–v3 proof can outlive the release that drops it. Pre-1.0 posture
+* applies: one current contract, no compat reader. A consumer on an older
+* factory must adopt this release before HQ ingests its pr:verify proofs.
+*/
+const SUPPORTED_PR_VERIFY_SCHEMA_VERSIONS = [4];
 const executedCommandSchema = z.object({
 	command: z.string().min(1),
 	counts: z.object({
@@ -1213,7 +1181,6 @@ const executedCommandSchema = z.object({
 	exitCode: z.number(),
 	name: z.string().min(1),
 	scope: z.enum([
-		"always",
 		"docs-only",
 		"trivial",
 		"full"
@@ -1228,9 +1195,9 @@ const notDemandedRecordSchema = z.object({
 	basis: z.string().min(1),
 	name: z.string().min(1)
 });
-const prVerifySchemaVersionSchema = z.number().refine((value) => SUPPORTED_PR_VERIFY_SCHEMA_VERSIONS.includes(value), { message: `schemaVersion must be one of: ${SUPPORTED_PR_VERIFY_SCHEMA_VERSIONS.join(", ")}` });
+const prVerifySchemaVersionSchema = z.literal(4);
 const prVerifyProofSchema = z.object({
-	authoringSession: z.string().trim().min(1).optional(),
+	authoringSession: z.string().trim().min(1),
 	base: z.string().min(1),
 	baselineFullProofs: z.array(z.object({
 		base: z.string().min(1),
@@ -1276,7 +1243,6 @@ const prVerifyProofSchema = z.object({
 		impactTarget: z.string().min(1).optional(),
 		name: z.string().min(1),
 		scope: z.enum([
-			"always",
 			"docs-only",
 			"trivial",
 			"full"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patronage/software-factory",
-  "version": "1.0.0-alpha.26",
+  "version": "1.0.0-alpha.28",
   "description": "Shared Patronage software factory CLI and project-profile validation tools",
   "license": "MIT",
   "repository": {
@@ -9,8 +9,8 @@
     "directory": "software-factory"
   },
   "bin": {
-    "patronage-factory": "./dist/index.js",
-    "psf": "./dist/index.js"
+    "patronage-factory": "./dist/cli.js",
+    "psf": "./dist/cli.js"
   },
   "files": [
     "dist",
@@ -37,7 +37,7 @@
     "picomatch": "^4.0.5",
     "yaml": "^2.9.0",
     "zod": "4.4.3",
-    "@patronage/factory-ci": "1.0.0-alpha.26"
+    "@patronage/factory-ci": "1.0.0-alpha.28"
   },
   "devDependencies": {
     "@types/node": "24.13.3",
@@ -64,7 +64,7 @@
     "api:check": "pnpm build && pnpm api:check:prepared",
     "api:check:prepared": "node scripts/public-api-surface.mjs",
     "precli": "bash ../scripts/ensure-worktree-bootstrap.sh",
-    "cli": "tsx src/index.ts",
+    "cli": "tsx src/cli.ts",
     "cleanup:check": "knip --files --dependencies --exports",
     "precoverage": "bash ../scripts/ensure-worktree-bootstrap.sh",
     "coverage": "vitest run --coverage",