@patronage/software-factory 1.0.0-alpha.27 → 1.0.0-alpha.28

package/dist/index.d.ts

@@ -17,8 +17,8 @@ declare const boundaryManifestBaseSchema: z.ZodObject<{
   boundary: z.ZodString;
   closeout: z.ZodOptional<z.ZodObject<{
     review: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -26,8 +26,8 @@ declare const boundaryManifestBaseSchema: z.ZodObject<{
   integrationBranch: z.ZodOptional<z.ZodString>;
   schemaVersion: z.ZodLiteral<1>;
   topology: z.ZodEnum<{
-    "each-to-main": "each-to-main";
     flagged: "flagged";
+    "each-to-main": "each-to-main";
     stacked: "stacked";
     "each-to-epic": "each-to-epic";
   }>;
@@ -36,8 +36,8 @@ declare const boundaryManifestBaseSchema: z.ZodObject<{
     issues: z.ZodArray<z.ZodNumber>;
     name: z.ZodString;
     review: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -46,8 +46,8 @@ declare const boundaryManifestSchema: z.ZodObject<{
   boundary: z.ZodString;
   closeout: z.ZodOptional<z.ZodObject<{
     review: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -55,8 +55,8 @@ declare const boundaryManifestSchema: z.ZodObject<{
   integrationBranch: z.ZodOptional<z.ZodString>;
   schemaVersion: z.ZodLiteral<1>;
   topology: z.ZodEnum<{
-    "each-to-main": "each-to-main";
     flagged: "flagged";
+    "each-to-main": "each-to-main";
     stacked: "stacked";
     "each-to-epic": "each-to-epic";
   }>;
@@ -65,8 +65,8 @@ declare const boundaryManifestSchema: z.ZodObject<{
     issues: z.ZodArray<z.ZodNumber>;
     name: z.ZodString;
     review: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -151,8 +151,8 @@ declare const boundaryReviewProofBaseSchema: z.ZodObject<{
   }>;
   producer: z.ZodString;
   rung: z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>;
   schemaVersion: z.ZodLiteral<1>;
@@ -195,8 +195,8 @@ declare const boundaryReviewProofSchema: z.ZodObject<{
   }>;
   producer: z.ZodString;
   rung: z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>;
   schemaVersion: z.ZodLiteral<1>;
@@ -1523,9 +1523,9 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
     mergeable: z.ZodString;
     requiredChecks: z.ZodEnum<{
       unknown: "unknown";
+      pending: "pending";
       passed: "passed";
       failed: "failed";
-      pending: "pending";
       none: "none";
     }>;
     reviewDecision: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1591,8 +1591,8 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       "run-interior-cycle": "run-interior-cycle";
     }>;
     stage: z.ZodEnum<{
-      gate: "gate";
       interior: "interior";
+      gate: "gate";
       "interior-complete": "interior-complete";
     }>;
   }, z.core.$strip>>;
@@ -1608,8 +1608,8 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       reviewedHeadSha: z.ZodOptional<z.ZodString>;
       reviewedPatchId: z.ZodOptional<z.ZodString>;
       status: z.ZodEnum<{
-        blocked: "blocked";
         "not-required": "not-required";
+        blocked: "blocked";
         current: "current";
         stale: "stale";
         missing: "missing";
@@ -1620,8 +1620,8 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       reviewedHeadSha: z.ZodOptional<z.ZodString>;
       reviewedPatchId: z.ZodOptional<z.ZodString>;
       status: z.ZodEnum<{
-        blocked: "blocked";
         "not-required": "not-required";
+        blocked: "blocked";
         current: "current";
         stale: "stale";
         missing: "missing";
@@ -2508,8 +2508,8 @@ declare const evidenceEnvelopeBaseSchema: z.ZodObject<{
   producer: z.ZodString;
   requestId: z.ZodOptional<z.ZodString>;
   rung: z.ZodOptional<z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>>;
   schemaVersion: z.ZodLiteral<1>;
@@ -2535,8 +2535,8 @@ declare const evidenceEnvelopeSchema: z.ZodObject<{
   producer: z.ZodString;
   requestId: z.ZodOptional<z.ZodString>;
   rung: z.ZodOptional<z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>>;
   schemaVersion: z.ZodLiteral<1>;
@@ -2638,8 +2638,8 @@ declare const loadEvidenceEnvelopes: (cwd: string) => LoadedEvidenceEnvelope[];
 //#region src/review-proof-applicability.d.ts
 declare const REVIEW_STATUS_VALUES: readonly ["not-required", "current", "stale", "missing", "blocked"];
 declare const reviewStatusSchema: z.ZodEnum<{
-  blocked: "blocked";
   "not-required": "not-required";
+  blocked: "blocked";
   current: "current";
   stale: "stale";
   missing: "missing";
@@ -2756,8 +2756,8 @@ declare const boundaryCheckProofSchema: z.ZodObject<{
     wave: z.ZodString;
   }, z.core.$strip>>;
   demandedRung: z.ZodOptional<z.ZodEnum<{
-    "independent-model": "independent-model";
     oracle: "oracle";
+    "independent-model": "independent-model";
     human: "human";
   }>>;
   epicIssue: z.ZodNumber;
@@ -2772,8 +2772,8 @@ declare const boundaryCheckProofSchema: z.ZodObject<{
     commentUrl: z.ZodOptional<z.ZodString>;
     producer: z.ZodString;
     rung: z.ZodEnum<{
-      "independent-model": "independent-model";
       oracle: "oracle";
+      "independent-model": "independent-model";
       human: "human";
     }>;
     sessionId: z.ZodOptional<z.ZodString>;
@@ -2789,8 +2789,8 @@ declare const boundaryCheckProofSchema: z.ZodObject<{
     value: z.ZodString;
   }, z.core.$strip>>;
   status: z.ZodEnum<{
-    blocked: "blocked";
     ready: "ready";
+    blocked: "blocked";
   }>;
 }, z.core.$strip>;
 type BoundaryCheckProofRecord = z.infer<typeof boundaryCheckProofSchema>;
@@ -2931,6 +2931,13 @@ interface PrReviewArgs extends LoadProjectProfileInput {
   assemble?: boolean;
   base: string;
   cycle: number;
+  /**
+   * Issue carrying the factory-boundary manifest, which may be the work issue
+   * itself. `--assemble` uses it to name the review rung the candidate's wave
+   * demands, so the prompt asks for the findings schema the gate accepts
+   * (#1001). It is the same handle `pr:publish` and `pr:ready` take.
+   */
+  epic?: number;
   dispositions?: string;
   findings?: string;
   historical?: boolean;
@@ -2964,7 +2971,22 @@ interface PrReviewDependencies {
    * test can state, never a silent pass.
    */
   basePolicy?: BaseReviewPolicyAuthority;
+  /**
+   * How the wave resolver reads an issue's closing pull requests (#1001).
+   * Injected for the same reason `fetchIssueBody` is: the wave demand must be
+   * statable in a test without a live repository.
+   */
+  fetchClosingPullRequests?: (input: PrReviewIssueBodyInput) => {
+    number: number;
+    state?: "OPEN" | "CLOSED" | "MERGED";
+  }[];
   fetchIssueBody?: (input: PrReviewIssueBodyInput) => string;
+  /**
+   * How `--assemble` reads the pull request whose wave demand names the review
+   * rung (#1001). Defaults to the GitHub lookup, and its result is validated
+   * before use, so an injected stub is held to the same shape.
+   */
+  fetchWavePullRequest?: (cwd: string) => unknown;
   git?: PrReviewGitDependencies;
   hq?: HqIngestDependencies;
   /**
@@ -3302,11 +3324,11 @@ declare const LegacyWorkerCloseoutStatusTraceEventSchema: z.ZodObject<{
   threadId: z.ZodOptional<z.ZodString>;
   workerId: z.ZodOptional<z.ZodString>;
   archiveStatus: z.ZodOptional<z.ZodEnum<{
-    pending: "pending";
     unavailable: "unavailable";
     archived: "archived";
     skipped: "skipped";
     "not-applicable": "not-applicable";
+    pending: "pending";
   }>>;
   closeoutReason: z.ZodOptional<z.ZodString>;
   eventType: z.ZodLiteral<"worker-closeout-lessons">;
@@ -3479,8 +3501,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     sessionId: z.ZodOptional<z.ZodString>;
   }, z.core.$strict>>;
   stage: z.ZodEnum<{
-    gate: "gate";
     interior: "interior";
+    gate: "gate";
   }>;
   usage: z.ZodOptional<z.ZodObject<{
     estimatedCostUsd: z.ZodOptional<z.ZodNumber>;
@@ -3532,8 +3554,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     sessionId: z.ZodOptional<z.ZodString>;
   }, z.core.$strict>>;
   stage: z.ZodEnum<{
-    gate: "gate";
     interior: "interior";
+    gate: "gate";
   }>;
   usage: z.ZodOptional<z.ZodObject<{
     estimatedCostUsd: z.ZodOptional<z.ZodNumber>;
@@ -3576,8 +3598,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
       sessionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     stage: z.ZodEnum<{
-      gate: "gate";
       interior: "interior";
+      gate: "gate";
     }>;
     usage: z.ZodOptional<z.ZodObject<{
       estimatedCostUsd: z.ZodOptional<z.ZodNumber>;
@@ -3607,7 +3629,7 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     staleRepeats: number;
   };
   observedAt: string;
-  stage: "gate" | "interior";
+  stage: "interior" | "gate";
   issue?: number | undefined;
   pr?: number | undefined;
   threadId?: string | undefined;
@@ -3700,11 +3722,11 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   threadId: z.ZodOptional<z.ZodString>;
   workerId: z.ZodOptional<z.ZodString>;
   archiveStatus: z.ZodOptional<z.ZodEnum<{
-    pending: "pending";
     unavailable: "unavailable";
     archived: "archived";
     skipped: "skipped";
     "not-applicable": "not-applicable";
+    pending: "pending";
   }>>;
   closeoutReason: z.ZodOptional<z.ZodString>;
   eventType: z.ZodLiteral<"worker-closeout-lessons">;
@@ -3741,11 +3763,11 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   }, z.core.$strict>], "lessonStatus">;
   readonly 2: z.ZodObject<{
     archiveStatus: z.ZodOptional<z.ZodEnum<{
-      pending: "pending";
       unavailable: "unavailable";
       archived: "archived";
       skipped: "skipped";
       "not-applicable": "not-applicable";
+      pending: "pending";
     }>>;
     closeoutReason: z.ZodOptional<z.ZodString>;
     lessonStatus: z.ZodOptional<z.ZodEnum<{
@@ -3863,8 +3885,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   interiorCycle: z.ZodOptional<z.ZodNumber>;
   observedAt: z.ZodString;
   purpose: z.ZodEnum<{
-    code: "code";
     review: "review";
+    code: "code";
   }>;
   slotResolution: z.ZodObject<{
     effort: z.ZodEnum<{
@@ -3883,8 +3905,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     model: z.ZodString;
     tier: z.ZodEnum<{
       review: "review";
-      oracle: "oracle";
       delegate: "delegate";
+      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
@@ -3892,8 +3914,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   startedAt: z.ZodString;
   tier: z.ZodEnum<{
     review: "review";
-    oracle: "oracle";
     delegate: "delegate";
+    oracle: "oracle";
     workhorse: "workhorse";
     scout: "scout";
   }>;
@@ -3942,8 +3964,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   interiorCycle: z.ZodOptional<z.ZodNumber>;
   observedAt: z.ZodString;
   purpose: z.ZodEnum<{
-    code: "code";
     review: "review";
+    code: "code";
   }>;
   slotResolution: z.ZodObject<{
     effort: z.ZodEnum<{
@@ -3962,8 +3984,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     model: z.ZodString;
     tier: z.ZodEnum<{
       review: "review";
-      oracle: "oracle";
       delegate: "delegate";
+      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
@@ -3971,8 +3993,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   startedAt: z.ZodString;
   tier: z.ZodEnum<{
     review: "review";
-    oracle: "oracle";
     delegate: "delegate";
+    oracle: "oracle";
     workhorse: "workhorse";
     scout: "scout";
   }>;
@@ -4012,8 +4034,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     interiorCycle: z.ZodOptional<z.ZodNumber>;
     observedAt: z.ZodString;
     purpose: z.ZodEnum<{
-      code: "code";
       review: "review";
+      code: "code";
     }>;
     slotResolution: z.ZodObject<{
       effort: z.ZodEnum<{
@@ -4032,8 +4054,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
       model: z.ZodString;
       tier: z.ZodEnum<{
         review: "review";
-        oracle: "oracle";
         delegate: "delegate";
+        oracle: "oracle";
         workhorse: "workhorse";
         scout: "scout";
       }>;
@@ -4041,8 +4063,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     startedAt: z.ZodString;
     tier: z.ZodEnum<{
       review: "review";
-      oracle: "oracle";
       delegate: "delegate";
+      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
@@ -4085,17 +4107,17 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   exitCode: number | null;
   harness: string;
   observedAt: string;
-  purpose: "code" | "review";
+  purpose: "review" | "code";
   slotResolution: {
     effort: "high" | "low" | "medium" | "xhigh";
     engine: string;
     layerSource: "committedDefault" | "operatorSession" | "userConfig";
     model: string;
-    tier: "review" | "oracle" | "delegate" | "workhorse" | "scout";
+    tier: "review" | "delegate" | "oracle" | "workhorse" | "scout";
     fallbackTier?: "delegate" | undefined;
   };
   startedAt: string;
-  tier: "review" | "oracle" | "delegate" | "workhorse" | "scout";
+  tier: "review" | "delegate" | "oracle" | "workhorse" | "scout";
   tokenUsage: {
     source: "cursor-csv" | "codex-json" | "cursor-json" | "claude-json";
     status: "available";
@@ -4424,7 +4446,7 @@ declare const evaluateReadiness: (input: EvaluationInput) => {
       draft: boolean;
       mergeStateStatus: string;
       mergeable: string;
-      requiredChecks: "unknown" | "passed" | "failed" | "pending" | "none";
+      requiredChecks: "unknown" | "pending" | "passed" | "failed" | "none";
       unresolvedReviewThreads: number;
       reviewDecision?: string | null | undefined;
     };
@@ -4439,13 +4461,13 @@ declare const evaluateReadiness: (input: EvaluationInput) => {
     reviews: {
       correctness: {
         required: boolean;
-        status: "blocked" | "not-required" | "current" | "stale" | "missing";
+        status: "not-required" | "blocked" | "current" | "stale" | "missing";
         reviewedHeadSha?: string | undefined;
         reviewedPatchId?: string | undefined;
       };
       security?: {
         required: boolean;
-        status: "blocked" | "not-required" | "current" | "stale" | "missing";
+        status: "not-required" | "blocked" | "current" | "stale" | "missing";
         reviewedHeadSha?: string | undefined;
         reviewedPatchId?: string | undefined;
       } | undefined;
@@ -4508,7 +4530,7 @@ declare const evaluateReadiness: (input: EvaluationInput) => {
         interior: number;
       };
       nextAction: "run-gate-cycle" | "accept-nonblocking-findings" | "escalate-to-triage" | "ready-for-human" | "advance-to-gate" | "run-interior-cycle";
-      stage: "gate" | "interior" | "interior-complete";
+      stage: "interior" | "gate" | "interior-complete";
       forcedTransition?: "gate-cap-exhausted" | "interior-cap-reached" | undefined;
     } | undefined;
     reviewRuns?: PrReviewResult[] | undefined;
@@ -4772,6 +4794,7 @@ interface AssembleReviewPromptInput {
   patchId: string;
   priorLedgerEntries?: FindingLedgerEntry[];
   profile: FactoryProjectProfile;
+  waveRung?: EvidenceReviewRung;
 }
 interface AssembleReviewPromptGitDependencies {
   repositoryRoot: (cwd: string) => string;
@@ -4793,7 +4816,8 @@ declare const assembleReviewPrompt: ({
   kind,
   patchId,
   priorLedgerEntries,
-  profile
+  profile,
+  waveRung
 }: AssembleReviewPromptInput, dependencies?: AssembleReviewPromptDependencies) => AssembledReviewPrompt;
 //#endregion
 //#region src/review-ladder-trace.d.ts

package/dist/index.js

@@ -18,7 +18,7 @@ import { FACTORY_APP_BROKER_ORIGIN, FACTORY_APP_BROKER_PATH, FACTORY_CURSOR_OIDC
 import http from "node:http";
 import { pathToFileURL } from "node:url";
 //#region package.json
-var version = "1.0.0-alpha.27";
+var version = "1.0.0-alpha.28";
 //#endregion
 //#region src/cli-entry.ts
 /**
@@ -17504,10 +17504,20 @@ function emitLadderStageTrace({ cwd, evaluation, headSha, issue, patchId, profil
 }
 //#endregion
 //#region src/review-contract.ts
-const REVIEW_FOOTER_INSTRUCTIONS = `Do not print a machine-readable footer in your chat response. Instead, write your findings to the typed findings file at the path given in your dispatch/task instructions (the file pr:review reads via --findings <path>). The file must be valid JSON matching review-findings-file.ts's schema (schemaVersion 1):
+const SESSION_ID_RULE = `"sessionId" is this review session's own id. It must differ from the authoring session id the candidate was verified under (FACTORY_SESSION_ID): pr:review --findings refuses a findings file whose sessionId equals the authoring session.`;
+const authorityRule = (waveRung) => waveRung === void 0 ? `Emit schemaVersion 1 and omit "producer" and "rung": this candidate resolves no boundary-wave review rung. If your dispatch instructions do name a rung, emit schemaVersion 2 with that rung and with "producer" instead.` : `This candidate belongs to a boundary wave that demands the ${waveRung} review rung, so schemaVersion 2 is required. Record "rung": "${waveRung}" exactly as shown, and set "producer" to the engine and model that ran this review (for example "codex-cli/gpt-5.6-sol"). Findings without both fields are recorded without authority, and pr:publish then refuses with "no passing review at that authority".`;
+/**
+* The findings-file instructions for one candidate.
+*
+* `waveRung` is the review rung the candidate's boundary wave demands, when it
+* resolves one. It selects the findings schema version the gate will accept.
+*/
+const reviewFooterInstructions = (waveRung) => {
+	const schemaVersion = waveRung === void 0 ? 1 : 2;
+	return `Do not print a machine-readable footer in your chat response. Instead, write your findings to the typed findings file at the path given in your dispatch/task instructions (the file pr:review reads via --findings <path>). The file must be valid JSON matching review-findings-file.ts's schema (schemaVersion ${schemaVersion}):
 {
-  "schemaVersion": 1,
-  "model": "<your model identifier>",
+  "schemaVersion": ${schemaVersion},
+${waveRung === void 0 ? "" : `  "producer": "<the engine and model that ran this review, for example codex-cli/gpt-5.6-sol>",\n  "rung": "${waveRung}",\n`}  "model": "<your model identifier>",
   "sessionId": "<this session's id>",
   "patchId": "<the stable patch-id from Review scope above>",
   "reviews": [
@@ -17520,10 +17530,13 @@ const REVIEW_FOOTER_INSTRUCTIONS = `Do not print a machine-readable footer in yo
     }
   ]
 }
+${authorityRule(waveRung)}
+${SESSION_ID_RULE}
 Use category "correctness", "safety", "coordination", or "maintainability"; set blockingAfterCap true for correctness, safety, or coordination findings. citedSpan must be the exact code text the finding is about, quoted verbatim from the diff (identity is derived from this, not from the title, so quote precisely). prescribedAction must be a concise, standalone statement of the required fix (identity is derived from this text too). If this finding is a restatement of a prior finding shown in the prior review ledger below, set supersedes to {"title": "<exact prior title>", "file": "<its file>"} instead of minting a new title for the same theme.`;
+};
 //#endregion
 //#region src/review-prompt.ts
-const reviewScope = ({ base, changedFiles: files, headSha, patchId, profile }) => `Review scope:
+const reviewScope = ({ base, changedFiles: files, headSha, patchId, profile, waveRung }) => `Review scope:
 - Repository: ${profile.repository.owner}/${profile.repository.name}
 - Base ref: ${base}
 - Head SHA: ${headSha}
@@ -17539,7 +17552,7 @@ Required constraints:
 - Do not request elevated or unsandboxed approvals.
 - When you flag a finding, report every other instance of the same class in this diff in the same response, and include a one-line coverage note.
 
-${REVIEW_FOOTER_INSTRUCTIONS}`;
+${reviewFooterInstructions(waveRung)}`;
 const MODE_FLOOR_FILES = {
 	correctness: "correctness.md",
 	security: "security/SKILL.md"
@@ -17613,7 +17626,7 @@ ${entries.map(priorLedgerEntryLine).join("\n")}
 
 Do not re-raise any of the findings above under a new title: they are already adjudicated (waived, filed as a follow-up, or fixed in this thread). If new evidence genuinely supersedes one of them, say so explicitly and name the exact prior finding (its title and file) that it supersedes, rather than minting an unrelated title for the same underlying theme.`
 });
-const assembleReviewPrompt = ({ base, changedFiles, cwd = process.cwd(), headSha, issueFocus, kind, patchId, priorLedgerEntries, profile }, dependencies = {}) => {
+const assembleReviewPrompt = ({ base, changedFiles, cwd = process.cwd(), headSha, issueFocus, kind, patchId, priorLedgerEntries, profile, waveRung }, dependencies = {}) => {
 	const priorLedger = priorLedgerEntries ? nonOpenLadderFindings(priorLedgerEntries) : [];
 	const optionalSegments = {
 		"coding-standards": codingStandardsSegment({
@@ -17633,7 +17646,8 @@ const assembleReviewPrompt = ({ base, changedFiles, cwd = process.cwd(), headSha
 			changedFiles,
 			headSha,
 			patchId,
-			profile
+			profile,
+			waveRung
 		}) },
 		{ text: modeFloorInstructions(kind, changedFiles) },
 		...REVIEW_PROMPT_SECTION_PROVENANCES.flatMap((provenance) => {
@@ -17658,7 +17672,8 @@ const ASSEMBLED_REVIEW_PROMPT_SCHEMA_VERSION = 1;
 const assembledReviewPromptKindSchema = z.object({
 	kind: z.enum(["correctness", "security"]),
 	prompt: z.string().min(1),
-	sections: z.array(reviewPromptSectionSchema)
+	sections: z.array(reviewPromptSectionSchema),
+	waveRung: z.enum(EVIDENCE_REVIEW_RUNGS).optional()
 });
 const assembledReviewPromptArtifactSchema = z.object({
 	headSha: z.string().regex(/^[0-9a-f]{40}$/u),
@@ -17687,6 +17702,51 @@ const defaultFetchIssueBody = ({ issue, owner, repo }) => runGhJson([
 	"--json",
 	"body"
 ]).body;
+const candidateWavePullRequestSchema = z.object({
+	baseRefName: z.string().min(1),
+	body: z.string(),
+	headRefName: z.string().min(1),
+	number: z.number().int().positive()
+});
+const defaultFetchWavePullRequest = (cwd) => runGhJsonAt([
+	"pr",
+	"view",
+	"--json",
+	"baseRefName,body,headRefName,number"
+], cwd);
+/**
+* The review rung this candidate's boundary wave demands (#1001).
+*
+* The assembled prompt tells the reviewer which findings schema the gate will
+* accept. A wave that demands a rung needs schemaVersion 2 with `producer` and
+* `rung`; the v1 shape is recorded without authority, and `pr:publish` then
+* refuses it with "no passing review at that authority".
+*
+* This is prompt enrichment and fails open, like the coding-standards read:
+* every unreadable step returns undefined and the prompt keeps the v1 shape.
+* It decides no authority — `pr:ready` resolves the same wave demand again and
+* is the stage that refuses on it.
+*/
+const assembleWaveRung = ({ args, cwd, dependencies, fetchIssueBody, fetchWavePullRequest, profile }) => {
+	if (args.epic === void 0) return;
+	try {
+		const pullRequest = candidateWavePullRequestSchema.parse(fetchWavePullRequest(cwd));
+		const demand = resolveWaveDemand({
+			baseRefName: pullRequest.baseRefName,
+			epic: args.epic,
+			...dependencies.fetchClosingPullRequests === void 0 ? {} : { fetchClosingPullRequests: dependencies.fetchClosingPullRequests },
+			fetchIssueBody,
+			headRefName: pullRequest.headRefName,
+			owner: profile.repository.owner,
+			pr: pullRequest.number,
+			prBody: pullRequest.body,
+			repo: profile.repository.name
+		});
+		return demand.kind === "demanded" ? demand.demand.review : void 0;
+	} catch {
+		return;
+	}
+};
 const assertReviewCycleInWindow = (cycle, maxCycles) => {
 	if (cycle < 1 || cycle > maxCycles) throw new Error(`--cycle must be between 1 and ${maxCycles}.`);
 };
@@ -17806,7 +17866,7 @@ const assembleGitDependencies = (git) => git.repositoryRoot !== void 0 && git.sh
 	repositoryRoot: git.repositoryRoot,
 	showFileAtRef: git.showFileAtRef
 } : void 0;
-const writeAssembledReviewPrompt = ({ args, cwd, fetchIssueBody, files, git, headSha, kinds, output, patchId, profile }) => {
+const writeAssembledReviewPrompt = ({ args, cwd, fetchIssueBody, files, git, headSha, kinds, output, patchId, profile, waveRung }) => {
 	const priorLedger = priorLedgerFor(priorLadderStateFor({
 		base: args.base,
 		cwd,
@@ -17826,12 +17886,14 @@ const writeAssembledReviewPrompt = ({ args, cwd, fetchIssueBody, files, git, hea
 			kind,
 			patchId,
 			priorLedgerEntries: priorLedger,
-			profile
+			profile,
+			...waveRung === void 0 ? {} : { waveRung }
 		}, assembleGit === void 0 ? {} : { git: assembleGit });
 		return {
 			kind,
 			prompt: assembled.prompt,
-			sections: assembled.sections
+			sections: assembled.sections,
+			...waveRung === void 0 ? {} : { waveRung }
 		};
 	});
 	const artifactPath = path.resolve(cwd, DEFAULT_ASSEMBLED_REVIEW_PROMPT_PATH);
@@ -17839,7 +17901,7 @@ const writeAssembledReviewPrompt = ({ args, cwd, fetchIssueBody, files, git, hea
 	writeProofJson({
 		headSha,
 		patchId,
-		reviews: existing.status === "ok" && existing.artifact.patchId === patchId && existing.artifact.headSha === headSha ? [...new Map([...existing.artifact.reviews, ...assembledReviews].map((review) => [review.kind, review])).values()] : assembledReviews,
+		reviews: existing.status === "ok" && existing.artifact.patchId === patchId && existing.artifact.headSha === headSha ? [...new Map([...existing.artifact.reviews.filter((review) => review.waveRung === waveRung), ...assembledReviews].map((review) => [review.kind, review])).values()] : assembledReviews,
 		schemaVersion: ASSEMBLED_REVIEW_PROMPT_SCHEMA_VERSION
 	}, artifactPath);
 	console.log(`pr:review assembled prompt written to ${artifactPath}`);
@@ -18068,17 +18130,26 @@ async function runPrReview(args, dependencies = {}) {
 			console.log(ASSEMBLE_FAITHFUL_MERGE_NOTICE);
 			return assembleProof();
 		}
+		const fetchIssueBody = dependencies.fetchIssueBody ?? defaultFetchIssueBody;
 		writeAssembledReviewPrompt({
 			args,
 			cwd,
-			fetchIssueBody: dependencies.fetchIssueBody ?? defaultFetchIssueBody,
+			fetchIssueBody,
 			files,
 			git,
 			headSha,
 			kinds,
 			output,
 			patchId,
-			profile
+			profile,
+			waveRung: assembleWaveRung({
+				args,
+				cwd,
+				dependencies,
+				fetchIssueBody,
+				fetchWavePullRequest: dependencies.fetchWavePullRequest ?? defaultFetchWavePullRequest,
+				profile
+			})
 		});
 		return assembleProof();
 	}
@@ -18980,7 +19051,7 @@ function assertForegroundGate({ gate, env = process.env }) {
 //#endregion
 //#region src/commands/pr-review.ts
 function createPrReviewCommand(output, action) {
-	return markCwdOptionDefault(new Command("pr:review").description("Assemble a factory-owned review prompt, or validate clean-session findings and write typed review proof").option("--base <ref>", "base branch or ref", "origin/main").option("--cwd <path>", "working directory to review", collectCwdOption).option("--cycle <number>", "review cycle number", positiveInteger$1("--cycle"), 1).option("--mode <mode>", "correctness, security, or all", "all").option("--assemble", "write the factory-owned review prompt for a clean session; do not validate findings").option("--findings <path>", "typed clean-session findings JSON file").option("--historical", "record findings that read an earlier commit on this branch: the cycle joins the ladder as prior history and renders no verdict of its own, so it never admits. It leaves the candidate's recorded verdict untouched. Use --dispositions for the findings its fixes answered").option("--dispositions <path>", "JSON file of ladder disposition declarations (waived / follow-up-filed / fixed-in-thread) for previously flagged findings").option("--issue <number>", "issue number recorded on the review ladder trace; --assemble also loads Review focus from this issue", positiveInteger$1("--issue")).option("--output <path>", "write proof JSON to a file").option("--profile <path>", "path to the project profile JSON file").option("--verify-proof <path>", "pr:verify proof JSON path").action(withGateTiming({
+	return markCwdOptionDefault(new Command("pr:review").description("Assemble a factory-owned review prompt, or validate clean-session findings and write typed review proof").option("--base <ref>", "base branch or ref", "origin/main").option("--cwd <path>", "working directory to review", collectCwdOption).option("--cycle <number>", "review cycle number", positiveInteger$1("--cycle"), 1).option("--mode <mode>", "correctness, security, or all", "all").option("--assemble", "write the factory-owned review prompt for a clean session; do not validate findings").option("--epic <number>", "issue carrying the factory-boundary manifest, which may be the work issue itself; --assemble then asks the reviewer for the findings schema the wave-demanded review rung accepts (#1001)", positiveInteger$1("--epic")).option("--findings <path>", "typed clean-session findings JSON file").option("--historical", "record findings that read an earlier commit on this branch: the cycle joins the ladder as prior history and renders no verdict of its own, so it never admits. It leaves the candidate's recorded verdict untouched. Use --dispositions for the findings its fixes answered").option("--dispositions <path>", "JSON file of ladder disposition declarations (waived / follow-up-filed / fixed-in-thread) for previously flagged findings").option("--issue <number>", "issue number recorded on the review ladder trace; --assemble also loads Review focus from this issue", positiveInteger$1("--issue")).option("--output <path>", "write proof JSON to a file").option("--profile <path>", "path to the project profile JSON file").option("--verify-proof <path>", "pr:verify proof JSON path").action(withGateTiming({
 		gate: "pr:review",
 		resolveCycle: (options) => options.cycle,
 		resolveLedgerRoot: (options) => resolveCwdOption(options.cwd),
@@ -18998,6 +19069,7 @@ function createPrReviewCommand(output, action) {
 			cwd: resolveCwdOption(options.cwd),
 			cycle: options.cycle,
 			dispositions: options.dispositions,
+			epic: options.epic,
 			findings: options.findings,
 			...options.historical === true ? { historical: true } : {},
 			issue: options.issue,

package/dist/schemas.d.ts

@@ -853,8 +853,8 @@ declare const closeoutArtifactSchema: z.ZodObject<{
     }, z.core.$strict>;
     unit: z.ZodEnum<{
       boolean: "boolean";
-      count: "count";
       text: "text";
+      count: "count";
       tokens: "tokens";
       usd: "usd";
     }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patronage/software-factory",
-  "version": "1.0.0-alpha.27",
+  "version": "1.0.0-alpha.28",
   "description": "Shared Patronage software factory CLI and project-profile validation tools",
   "license": "MIT",
   "repository": {
@@ -37,7 +37,7 @@
     "picomatch": "^4.0.5",
     "yaml": "^2.9.0",
     "zod": "4.4.3",
-    "@patronage/factory-ci": "1.0.0-alpha.27"
+    "@patronage/factory-ci": "1.0.0-alpha.28"
   },
   "devDependencies": {
     "@types/node": "24.13.3",