@patronage/software-factory 1.0.0-alpha.29 → 1.0.0-alpha.30

package/README.md

@@ -24,11 +24,13 @@ The package publishes to public npm as `@patronage/software-factory` under MIT.
 
 Internal architectural packages live under `src/packages/`. Read the package root's `README.md` before editing one. Import only entry points explicitly declared by `dependency-cruiser.config.mjs`; package implementation and fixtures are private. See ADR 0007 (`docs/adr/0007-factory-internal-deep-packages-enforce-module-seams.md` in the source repository).
 
+A public export leaves this package only with a named supported-consumer account, under the criteria in that ADR's 2026-09-04 amendment. `api:check` reports declaration drift, and it passes a breaking removal through whenever the version opens a break window, so it is a notice rather than the control. The control is that amendment plus `src/public-consumer-surface.test.ts`, which names every export the audited consumers import and fails when one goes. The amendment also lists the retained surface — the exports that stay without a current importer — and the reason each group stays.
+
 ## Releases
 
-This is the release checklist. It lives here and nowhere else; the repository runbook links to it rather than restating it. Every epic or close-out sweep ends in an attended release — do not let merged work accumulate untagged.
+This is the release checklist. It lives here and nowhere else; the repository runbook links to it rather than restating it. Do not let merged work accumulate untagged: merged work that no release-owning boundary carries rides the next attended release.
 
-Releases are attended and hand-cut. Nothing in the factory publishes, tags, or releases on its own, and no step below may be automated as a drive-by.
+Releases are attended and hand-cut. Nothing in the factory publishes, tags, or releases on its own, and no step below may be automated as a drive-by. Delivery closeout (`boundary:check --final`, then `factory:closeout` on the epic) is a separate act with a separate owner: it closes the epic and releases nothing. Only a release-owning boundary carries a release, and one issue at a time holds that authority for a given version. A docs-only or non-release-owning runtime boundary closes without a bump and waits for the next attended cut. The admission skill's [closeout reference](../skills/patronage-software-factory-admission/references/epic-closeout.md#delivery-closeout-is-not-a-release) states the same split from the closeout side.
 
 The factory family has one version posture (ADR 0026, `docs/adr/0026-factory-family-version-lines-move-in-lockstep.md` in the source repository): `@patronage/factory-ci` moves in lockstep majors with this CLI. From factory-ci's first release in the CLI's current series onward, majors and prerelease series move together while patch and prerelease increments stay independent per package. A consumer pins a factory-ci from the same major/prerelease series as its CLI; there is no compatibility matrix. Until that first lockstep release, factory-ci's published 0.x line is the named pre-adoption state and pairs with any CLI version. `@patronage/alchemy-d1-state` keeps independent SemVer. Lockstep is a rule the maintainer follows when cutting releases, never automation.
 

package/dist/index.d.ts

@@ -611,8 +611,6 @@ type PolicyResolution = z.infer<typeof policyResolutionSchema>;
 type ReviewFindingSeverity = "critical" | "high" | "medium" | "low" | "unknown";
 type ReviewFindingCategory = "correctness" | "safety" | "coordination" | "maintainability" | "unknown";
 declare const REVIEW_SEVERITIES: readonly ["critical", "high", "medium", "low", "unknown"];
-declare const resolveReviewFindingSeverity: (priority?: string) => ReviewFindingSeverity;
-declare const resolveReviewFindingCategory: (category?: string) => ReviewFindingCategory;
 declare const FINDING_DISPOSITIONS: readonly ["open", "fixed-in-thread", "follow-up-filed", "waived", "stale-repeat", "rerun-noise"];
 type FindingDisposition = (typeof FINDING_DISPOSITIONS)[number];
 interface ReviewFindingAttributes {
@@ -628,17 +626,11 @@ interface ReviewFindingAttributes {
   };
   title: string;
 }
-type BlockingResolvableFinding = Pick<ReviewFindingAttributes, "blockingAfterCap" | "category" | "priority">;
-declare const resolveFindingBlocking: (finding: BlockingResolvableFinding, disposition?: FindingDisposition) => boolean;
 interface ReviewLadderPolicy {
   gate: {
     cap: number;
   };
-  interior: {
-    cap: number;
-  };
 }
-declare const resolveReviewLadderPolicy: () => ReviewLadderPolicy;
 //#endregion
 //#region src/review-ladder-ledger.d.ts
 type LadderCycleStage = "interior" | "gate";
@@ -668,18 +660,6 @@ interface FindingLedgerEntry extends ReviewFindingAttributes {
   reopenedCount: number;
   staleRepeatCount: number;
 }
-declare const findingKey: (finding: {
-  citedSpan?: string;
-  file?: string;
-  prescribedAction?: string;
-  title?: string;
-}) => string;
-declare const openLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
-declare const blockingLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
-declare const staleRepeatLadderFindings: (ledger: FindingLedgerEntry[]) => FindingLedgerEntry[];
-declare const inferFixedInThreadDispositions: (ledger: FindingLedgerEntry[], findings: readonly LadderFindingReport[], options?: {
-  sameHeadAsPriorCycle?: boolean;
-}) => LadderDispositionDeclaration[];
 //#endregion
 //#region src/review-ladder.d.ts
 type ReviewLadderExecutedStage = "interior" | "gate";
@@ -709,47 +689,29 @@ interface ReviewLadderCycle {
   stage: LadderCycleStage;
   usage?: LadderUsageReport;
 }
-interface LadderInteriorCapTransition {
-  cap: number;
-  kind: "interior-cap-reached";
-}
-interface LadderGateCapTransition {
+type LadderNextActionKind = "run-interior-cycle" | "advance-to-gate" | "run-gate-cycle" | "accept-nonblocking-findings" | "escalate-to-triage" | "ready-for-human";
+type ReviewLadderStage = "interior" | "interior-complete" | "gate";
+type LadderForcedTransitionKind = "gate-cap-exhausted" | "interior-cap-reached";
+interface LadderForcedTransition {
   blockingFindings: string[];
   cap: number;
-  kind: "gate-cap-exhausted";
+  kind: Extract<LadderForcedTransitionKind, "gate-cap-exhausted">;
 }
-type LadderForcedTransition = LadderGateCapTransition | LadderInteriorCapTransition;
-interface LadderRunInteriorCycleAction {
+type LadderNextAction = {
   cycle: number;
-  kind: "run-interior-cycle";
-}
-type LadderGateNextAction = {
-  cycle: number;
-  kind: "run-gate-cycle";
-} | {
-  kind: "accept-nonblocking-findings";
-} | {
-  kind: "escalate-to-triage";
+  kind: Extract<LadderNextActionKind, "run-gate-cycle">;
 } | {
-  kind: "ready-for-human";
-};
-type LadderPosition = {
-  forcedTransition?: LadderGateCapTransition;
-  nextAction: LadderGateNextAction;
-  stage: "gate";
+  kind: Extract<LadderNextActionKind, "accept-nonblocking-findings">;
 } | {
-  forcedTransition?: LadderInteriorCapTransition;
-  nextAction: {
-    kind: "advance-to-gate";
-  };
-  stage: "interior-complete";
+  kind: Extract<LadderNextActionKind, "escalate-to-triage">;
 } | {
-  forcedTransition?: never;
-  nextAction: LadderRunInteriorCycleAction;
-  stage: "interior";
+  kind: Extract<LadderNextActionKind, "ready-for-human">;
 };
-type LadderNextAction = LadderPosition["nextAction"];
-type ReviewLadderStage = LadderPosition["stage"];
+interface LadderPosition {
+  forcedTransition?: LadderForcedTransition;
+  nextAction: LadderNextAction;
+  stage: Extract<ReviewLadderStage, "gate">;
+}
 interface ReviewLadderStageEvent {
   cycle: number;
   cyclesToClean?: number;
@@ -769,28 +731,15 @@ interface ReviewLadderStageEvent {
   type: "review-ladder-stage";
   usage?: LadderUsageReport;
 }
-interface LadderDiagnostic {
-  code: "interior-cycles-unrecorded";
-  message: string;
-}
 type ReviewLadderEvaluation = LadderPosition & {
   cycleCounts: {
     gate: number;
     interior: number;
   };
-  diagnostics: LadderDiagnostic[];
   event?: ReviewLadderStageEvent;
   ledger: FindingLedgerEntry[];
   unmatchedDispositions: LadderDispositionDeclaration[];
 };
-interface EvaluateReviewLadderInput {
-  cycles: ReviewLadderCycle[];
-  policy: ReviewLadderPolicy;
-}
-declare const evaluateReviewLadder: ({
-  cycles,
-  policy
-}: EvaluateReviewLadderInput) => ReviewLadderEvaluation;
 //#endregion
 //#region src/pr-readiness/ladder-proof-state.d.ts
 interface PrReviewLadderState {
@@ -807,8 +756,8 @@ interface ReviewLadderSummaryState {
     gate: number;
     interior: number;
   };
-  forcedTransition?: LadderForcedTransition["kind"];
-  nextAction: LadderNextAction["kind"];
+  forcedTransition?: LadderForcedTransitionKind;
+  nextAction: LadderNextActionKind;
   stage: ReviewLadderStage;
 }
 interface ReviewLadderSnapshot {
@@ -1360,8 +1309,8 @@ declare const mergeFreezeStateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   generationId: z.ZodNumber;
   headSha: z.ZodString;
   outcome: z.ZodEnum<{
-    active: "active";
     stale: "stale";
+    active: "active";
   }>;
   reason: z.ZodString;
   recordedAt: z.ZodISODateTime;
@@ -1583,12 +1532,12 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       "interior-cap-reached": "interior-cap-reached";
     }>>;
     nextAction: z.ZodEnum<{
+      "run-interior-cycle": "run-interior-cycle";
+      "advance-to-gate": "advance-to-gate";
       "run-gate-cycle": "run-gate-cycle";
       "accept-nonblocking-findings": "accept-nonblocking-findings";
       "escalate-to-triage": "escalate-to-triage";
       "ready-for-human": "ready-for-human";
-      "advance-to-gate": "advance-to-gate";
-      "run-interior-cycle": "run-interior-cycle";
     }>;
     stage: z.ZodEnum<{
       interior: "interior";
@@ -1609,9 +1558,9 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       reviewedPatchId: z.ZodOptional<z.ZodString>;
       status: z.ZodEnum<{
         "not-required": "not-required";
-        stale: "stale";
         blocked: "blocked";
         current: "current";
+        stale: "stale";
         missing: "missing";
       }>;
     }, z.core.$strip>;
@@ -1621,9 +1570,9 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       reviewedPatchId: z.ZodOptional<z.ZodString>;
       status: z.ZodEnum<{
         "not-required": "not-required";
-        stale: "stale";
         blocked: "blocked";
         current: "current";
+        stale: "stale";
         missing: "missing";
       }>;
     }, z.core.$strip>>;
@@ -2732,9 +2681,9 @@ declare const loadEvidenceEnvelopes: (cwd: string) => LoadedEvidenceEnvelope[];
 declare const REVIEW_STATUS_VALUES: readonly ["not-required", "current", "stale", "missing", "blocked"];
 declare const reviewStatusSchema: z.ZodEnum<{
   "not-required": "not-required";
-  stale: "stale";
   blocked: "blocked";
   current: "current";
+  stale: "stale";
   missing: "missing";
 }>;
 type ReviewStatus = z.infer<typeof reviewStatusSchema>;
@@ -2818,7 +2767,7 @@ declare const reviewProofFor: (proof: PrReviewProof | undefined, kind: PrReviewK
   patchId: string;
 }) => ReviewProofClaim;
 declare namespace review_proof_d_exports {
-  export { DEFAULT_PR_REVIEW_MAX_CYCLES, DEFAULT_PR_REVIEW_PROOF_PATH, PR_REVIEW_FINAL_READINESS_NOTICE, PR_REVIEW_FINDING_PROVENANCE_VERSION, PR_REVIEW_PROOF_DESCRIPTOR, PR_REVIEW_SCHEMA_VERSION, PrReviewFinding, PrReviewKind, PrReviewLadderState, PrReviewMode, PrReviewOutcome, PrReviewProof, PrReviewResult, PrReviewStageResolution, REVIEW_SEVERITIES, ReviewAcceptance, ReviewCycleState, ReviewFindingCategory, ReviewFindingSeverity, ReviewTerminalState, prReviewFindingSchema, prReviewProofSchema, prReviewResultSchema, readPrReviewProof, resolveReviewAcceptance, resolveReviewTerminalState, resolveReviewTerminalStateAcrossReviews, resolveReviewTerminalStateAcrossReviewsForPolicy, resolveReviewTerminalStateForEpoch, reviewCycleStateFor, reviewProofFor, validatePrReviewProof, validatePrReviewResult };
+  export { DEFAULT_PR_REVIEW_MAX_CYCLES, DEFAULT_PR_REVIEW_PROOF_PATH, PR_REVIEW_FINAL_READINESS_NOTICE, PR_REVIEW_FINDING_PROVENANCE_VERSION, PR_REVIEW_PROOF_DESCRIPTOR, PR_REVIEW_SCHEMA_VERSION, PrReviewFinding, PrReviewKind, PrReviewLadderState, PrReviewMode, PrReviewOutcome, PrReviewProof, PrReviewResult, PrReviewStageResolution, REVIEW_SEVERITIES, ReviewAcceptance, ReviewCycleState, ReviewFindingCategory, ReviewFindingSeverity, ReviewTerminalState, prReviewFindingSchema, prReviewProofSchema, prReviewResultSchema, resolveReviewAcceptance, resolveReviewTerminalState, resolveReviewTerminalStateAcrossReviews, resolveReviewTerminalStateAcrossReviewsForPolicy, resolveReviewTerminalStateForEpoch, reviewCycleStateFor, reviewProofFor, validatePrReviewProof, validatePrReviewResult };
 }
 declare const PR_REVIEW_SCHEMA_VERSION = 2;
 declare const PR_REVIEW_FINDING_PROVENANCE_VERSION = 1;
@@ -2830,7 +2779,6 @@ declare const prReviewResultSchema: z.ZodType<PrReviewResult>;
 declare const prReviewProofSchema: z.ZodType<PrReviewProof>;
 declare const validatePrReviewResult: (value: unknown) => PrReviewResult;
 declare const validatePrReviewProof: (value: unknown) => PrReviewProof;
-declare const readPrReviewProof: (filePath: string) => PrReviewProof;
 declare const PR_REVIEW_PROOF_DESCRIPTOR: ProofDescriptor<PrReviewProof>;
 //#endregion
 //#region src/schemas.d.ts
@@ -3986,8 +3934,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   interiorCycle: z.ZodOptional<z.ZodNumber>;
   observedAt: z.ZodString;
   purpose: z.ZodEnum<{
-    code: "code";
     review: "review";
+    code: "code";
   }>;
   slotResolution: z.ZodObject<{
     effort: z.ZodEnum<{
@@ -4065,8 +4013,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   interiorCycle: z.ZodOptional<z.ZodNumber>;
   observedAt: z.ZodString;
   purpose: z.ZodEnum<{
-    code: "code";
     review: "review";
+    code: "code";
   }>;
   slotResolution: z.ZodObject<{
     effort: z.ZodEnum<{
@@ -4135,8 +4083,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     interiorCycle: z.ZodOptional<z.ZodNumber>;
     observedAt: z.ZodString;
     purpose: z.ZodEnum<{
-      code: "code";
       review: "review";
+      code: "code";
     }>;
     slotResolution: z.ZodObject<{
       effort: z.ZodEnum<{
@@ -4208,7 +4156,7 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   exitCode: number | null;
   harness: string;
   observedAt: string;
-  purpose: "code" | "review";
+  purpose: "review" | "code";
   slotResolution: {
     effort: "high" | "low" | "medium" | "xhigh";
     engine: string;
@@ -4562,13 +4510,13 @@ declare const evaluateReadiness: (input: EvaluationInput) => {
     reviews: {
       correctness: {
         required: boolean;
-        status: "not-required" | "stale" | "blocked" | "current" | "missing";
+        status: "not-required" | "blocked" | "current" | "stale" | "missing";
         reviewedHeadSha?: string | undefined;
         reviewedPatchId?: string | undefined;
       };
       security?: {
         required: boolean;
-        status: "not-required" | "stale" | "blocked" | "current" | "missing";
+        status: "not-required" | "blocked" | "current" | "stale" | "missing";
         reviewedHeadSha?: string | undefined;
         reviewedPatchId?: string | undefined;
       } | undefined;
@@ -4630,7 +4578,7 @@ declare const evaluateReadiness: (input: EvaluationInput) => {
         gate: number;
         interior: number;
       };
-      nextAction: "run-gate-cycle" | "accept-nonblocking-findings" | "escalate-to-triage" | "ready-for-human" | "advance-to-gate" | "run-interior-cycle";
+      nextAction: "run-interior-cycle" | "advance-to-gate" | "run-gate-cycle" | "accept-nonblocking-findings" | "escalate-to-triage" | "ready-for-human";
       stage: "interior" | "gate" | "interior-complete";
       forcedTransition?: "gate-cap-exhausted" | "interior-cap-reached" | undefined;
     } | undefined;
@@ -4921,52 +4869,6 @@ declare const assembleReviewPrompt: ({
   waveRung
 }: AssembleReviewPromptInput, dependencies?: AssembleReviewPromptDependencies) => AssembledReviewPrompt;
 //#endregion
-//#region src/review-ladder-trace.d.ts
-interface ReviewLadderTraceIdentity {
-  issue?: number;
-  pr?: number;
-  repo: string;
-  threadId?: string;
-  workerId?: string;
-}
-interface ReviewLadderStageTraceWriteResult {
-  errorMessage?: string;
-  filePath?: string;
-  mirrorDiagnostics: TraceMirrorDiagnostic[];
-  ok: boolean;
-}
-declare const buildReviewLadderStageTraceEvent: ({
-  createdAt,
-  event,
-  headSha,
-  identity,
-  patchId
-}: {
-  createdAt?: string;
-  event: ReviewLadderStageEvent;
-  headSha?: string;
-  identity: ReviewLadderTraceIdentity;
-  patchId?: string;
-}) => FactoryTraceEvent;
-declare const appendReviewLadderStageTraceEvent: ({
-  createdAt,
-  event,
-  headSha,
-  identity,
-  mirror,
-  patchId,
-  repoRoot
-}: {
-  createdAt?: string;
-  event: ReviewLadderStageEvent;
-  headSha?: string;
-  identity: ReviewLadderTraceIdentity;
-  mirror?: TraceSink;
-  patchId?: string;
-  repoRoot: string;
-}) => AppendFactoryTraceEventResult;
-declare const tryAppendReviewLadderStageTraceEvent: (input: Parameters<typeof appendReviewLadderStageTraceEvent>[0]) => ReviewLadderStageTraceWriteResult;
-//#endregion
 //#region src/verification-run-context.d.ts
 declare const FACTORY_BASE_REF_ENV = "FACTORY_BASE_REF";
 declare const FACTORY_CHANGED_FILES_ENV = "FACTORY_CHANGED_FILES";
@@ -5112,4 +5014,4 @@ declare function createProgram(options?: CreateProgramOptions): Command;
  */
 declare function run(argv?: string[], cliEntry?: string): Promise<void>;
 //#endregion
-export { type AppendFactoryTraceEventResult, type AssembledReviewPrompt, type BatteryCommandDisposition, type BatteryDisposition, type BoundaryCheckArgs, type BoundaryCheckDependencies, type BoundaryCheckProofRecord, type BuildEpicStructureEventInput, type CloudflareAccessServiceToken, type CompletedFactoryCheckSnapshot, CreateProgramOptions, DEFAULT_DEMAND_WAIVER_PATH, DEFAULT_FACTORY_REPOSITORY, DEFAULT_ROOT_SHARED_GLOBS, type DagDocument, type DemandWaiveArgs, type DemandWaiveDependencies, DemandWaiveRefusalError, type DemandWaiver, type DemandWaiverStore, EMPTY_TREE_OBJECT_HASH, EPIC_STRUCTURE_NODE_STATUSES, EPIC_STRUCTURE_SCHEMA_VERSION, type EpicStructureEvent, type EpicStructureGraphPayload, type EpicStructureNodeStatus, EpicStructureValidationError, type EvidenceEmitArgs, type EvidenceEmitDependencies, type EvidenceEmitResult, FACTORY_BASE_REF_ENV, FACTORY_CHANGED_FILES_ENV, FACTORY_CHANGED_FILES_FILE_ENV, type FactoryCliInvocation, FactoryCliInvocationSchema, type FactoryPrStatusCheckName, type FactoryPrStatusSources, type FactoryProjectProfile, type FactoryTraceDiagnostic, type FactoryTraceEnvelope, type FactoryTraceEvent, type FindingDisposition, type FindingLedgerEntry, type FollowUpAction, FollowUpActionSchema, type GitHubCheckRunMergeFreezeApi, type ImpactScopeDecision, type ImpactScopeSurface, type IssueReviewFocus, type LadderDispositionDeclaration, MERGE_FREEZE_APP_SLUG, MERGE_FREEZE_CHECK_NAME, type MergeFreezeAuthority, type MergeFreezeGeneration, type MergeFreezeState, type MergeFreezeStoreInput, type PlanFactoryPrStatusHudInput, type PrPublishArgs, type PrPublishDependencies, PrPublishFollowUpError, type PrPublishFollowUpOutcome, type PrPublishHandoff, type PrPublishResult, type PrReadyArgs, type PrReadyProof, type PresentFactoryPrStatusHudDependencies, type PresentFactoryPrStatusHudInput, type PreviewDisposition, type PreviewLifecyclePlan, type PreviewTargetPlan, type PublishEpicStructureArgs, type PublishEpicStructureResult, type PublishFollowUpPlan, REVIEW_FOCUS_SECTION, type ReadFactoryPrStatusSourcesDependencies, type ReadFactoryPrStatusSourcesInput, type RefreshFactoryPrStatusHudInput, type RenderFactoryPrStatusHudInput, type ReviewGateNotRequiredProof, type ReviewGateTraceIdentity, type ReviewLadderCycle, type ReviewLadderEvaluation, type ReviewLadderPolicy, type ReviewLadderStageEvent, type ReviewLadderTraceIdentity, type ReviewPromptSection, type ReviewPromptSectionProvenance, type ScanFactoryTraceDiagnosticsOptions, type ScanFactoryTraceOptions, type ScanFactoryTraceResult, type ScopedOutCommand, type TraceMirrorDiagnostic, type TraceSink, type TraceWriteResult, type TraceWriteSinks, type VerificationBatteryPlan, type VerificationReuse, type VerificationRunContext, type VerificationRunContextInput, type WaivedDemand, WorkerCheckoutGuardError, type WorkerCloseoutLessonsTraceEvent, appendReviewLadderStageTraceEvent, appendWithTraceSinks, applyDemandWaiver, assembleReviewPrompt, assertFactoryPrStatusIdentity, assertWorkerCheckoutAllowed, authorizeDemandWaiver, batteryScopeSummaryLines, blockingLadderFindings, boundary_manifest_d_exports as boundaryManifest, boundary_review_proof_d_exports as boundaryReviewProof, buildEpicStructureEvent, buildEpicStructurePayload, buildEvidenceEnvelope, buildReviewGateNotRequiredTraceEvent, buildReviewLadderStageTraceEvent, comment_provenance_d_exports as commentProvenance, createGitHubCheckRunMergeFreezeStore, createLocalJsonlTraceSink, createProgram, createVerificationRunContext, doctorProjectProfile, epicStructureEventId, evaluateReviewLadder, evidenceEnvelopeFilename, findingKey, followUpFromArgv, impactStampScopeDecision, inferFixedInThreadDispositions, isProductionHqUrl, loadProjectProfile, normalizeIssueComments, openLadderFindings, planFactoryPrStatusHud, planPreviewLifecycle, planPublishFollowUp, planVerificationBattery, readiness_evaluation_d_exports as prReadinessEvaluation, external_evidence_d_exports as prReadinessExternalEvidence, pr_body_renderer_d_exports as prReadinessPrBodyRenderer, proof_identity_d_exports as prReadinessProofIdentity, review_proof_d_exports as prReadinessReviewProof, status_check_rollup_d_exports as prReadinessStatusChecks, verification_proof_d_exports as prReadinessVerificationProof, presentFactoryPrStatusHud, previewLifecycleTargets, publishEpicStructure, readDemandWaivers, readFactoryPrStatusSources, readPrReadyProof, readPrReviewProof, refreshFactoryPrStatusHud, refreshFactoryPrStatusHudSafely, renderFactoryPrStatusHud, resolveFactoryRepository, resolveFindingBlocking, resolveReviewFindingCategory, resolveReviewFindingSeverity, resolveReviewLadderPolicy, resolveTraceWriteSinks, reviewCycleStateFor, reviewFocusFromIssueBody, reviewPromptSectionSchema, reviewPromptSectionsSchema, run, runBoundaryCheck, runDemandWaive, runEvidenceEmit, runPrPublish, runPrReady, runPrReview, runPrVerify, scanFactoryTraceDiagnostics, scanFactoryTraceEvents, selectWaiversForCandidate, staleRepeatLadderFindings, toFactoryTraceEnvelope, tryAppendReviewGateNotRequiredTraceEvent, tryAppendReviewLadderStageTraceEvent, validateBoundaryCheckProof, validateDagDocument, validateDemandWaiverStore, validateFactoryTraceEvent, validateMergeFreezeState, validatePrReadyProof, validatePrReviewProof, validatePrVerifyProof, validatePreviewLifecyclePlan, waivedDemandNotice, waivedDemandSchema, worktree_scratch_files_d_exports as worktreeScratchFiles };
+export { type AppendFactoryTraceEventResult, type AssembledReviewPrompt, type BatteryCommandDisposition, type BatteryDisposition, type BoundaryCheckArgs, type BoundaryCheckDependencies, type BoundaryCheckProofRecord, type BuildEpicStructureEventInput, type CloudflareAccessServiceToken, type CompletedFactoryCheckSnapshot, CreateProgramOptions, DEFAULT_DEMAND_WAIVER_PATH, DEFAULT_FACTORY_REPOSITORY, DEFAULT_ROOT_SHARED_GLOBS, type DagDocument, type DemandWaiveArgs, type DemandWaiveDependencies, DemandWaiveRefusalError, type DemandWaiver, type DemandWaiverStore, EMPTY_TREE_OBJECT_HASH, EPIC_STRUCTURE_NODE_STATUSES, EPIC_STRUCTURE_SCHEMA_VERSION, type EpicStructureEvent, type EpicStructureGraphPayload, type EpicStructureNodeStatus, EpicStructureValidationError, type EvidenceEmitArgs, type EvidenceEmitDependencies, type EvidenceEmitResult, FACTORY_BASE_REF_ENV, FACTORY_CHANGED_FILES_ENV, FACTORY_CHANGED_FILES_FILE_ENV, type FactoryCliInvocation, FactoryCliInvocationSchema, type FactoryPrStatusCheckName, type FactoryPrStatusSources, type FactoryProjectProfile, type FactoryTraceDiagnostic, type FactoryTraceEnvelope, type FactoryTraceEvent, type FollowUpAction, FollowUpActionSchema, type GitHubCheckRunMergeFreezeApi, type ImpactScopeDecision, type ImpactScopeSurface, type IssueReviewFocus, MERGE_FREEZE_APP_SLUG, MERGE_FREEZE_CHECK_NAME, type MergeFreezeAuthority, type MergeFreezeGeneration, type MergeFreezeState, type MergeFreezeStoreInput, type PlanFactoryPrStatusHudInput, type PrPublishArgs, type PrPublishDependencies, PrPublishFollowUpError, type PrPublishFollowUpOutcome, type PrPublishHandoff, type PrPublishResult, type PrReadyArgs, type PrReadyProof, type PrVerifyProof, type PresentFactoryPrStatusHudDependencies, type PresentFactoryPrStatusHudInput, type PreviewDisposition, type PreviewLifecyclePlan, type PreviewTargetPlan, type PublishEpicStructureArgs, type PublishEpicStructureResult, type PublishFollowUpPlan, REVIEW_FOCUS_SECTION, type ReadFactoryPrStatusSourcesDependencies, type ReadFactoryPrStatusSourcesInput, type RefreshFactoryPrStatusHudInput, type RenderFactoryPrStatusHudInput, type ReviewGateNotRequiredProof, type ReviewGateTraceIdentity, type ReviewPromptSection, type ReviewPromptSectionProvenance, type ScanFactoryTraceDiagnosticsOptions, type ScanFactoryTraceOptions, type ScanFactoryTraceResult, type ScopedOutCommand, type TraceMirrorDiagnostic, type TraceSink, type TraceWriteResult, type TraceWriteSinks, type VerificationBatteryPlan, type VerificationReuse, type VerificationRunContext, type VerificationRunContextInput, type WaivedDemand, WorkerCheckoutGuardError, type WorkerCloseoutLessonsTraceEvent, appendWithTraceSinks, applyDemandWaiver, assembleReviewPrompt, assertFactoryPrStatusIdentity, assertWorkerCheckoutAllowed, authorizeDemandWaiver, batteryScopeSummaryLines, boundary_manifest_d_exports as boundaryManifest, boundary_review_proof_d_exports as boundaryReviewProof, buildEpicStructureEvent, buildEpicStructurePayload, buildEvidenceEnvelope, buildReviewGateNotRequiredTraceEvent, comment_provenance_d_exports as commentProvenance, createGitHubCheckRunMergeFreezeStore, createLocalJsonlTraceSink, createProgram, createVerificationRunContext, doctorProjectProfile, epicStructureEventId, evidenceEnvelopeFilename, followUpFromArgv, impactStampScopeDecision, isProductionHqUrl, loadProjectProfile, normalizeIssueComments, planFactoryPrStatusHud, planPreviewLifecycle, planPublishFollowUp, planVerificationBattery, readiness_evaluation_d_exports as prReadinessEvaluation, external_evidence_d_exports as prReadinessExternalEvidence, pr_body_renderer_d_exports as prReadinessPrBodyRenderer, proof_identity_d_exports as prReadinessProofIdentity, review_proof_d_exports as prReadinessReviewProof, status_check_rollup_d_exports as prReadinessStatusChecks, verification_proof_d_exports as prReadinessVerificationProof, presentFactoryPrStatusHud, previewLifecycleTargets, publishEpicStructure, readDemandWaivers, readFactoryPrStatusSources, readPrReadyProof, refreshFactoryPrStatusHud, refreshFactoryPrStatusHudSafely, renderFactoryPrStatusHud, resolveFactoryRepository, resolveTraceWriteSinks, reviewFocusFromIssueBody, reviewPromptSectionSchema, reviewPromptSectionsSchema, run, runBoundaryCheck, runDemandWaive, runEvidenceEmit, runPrPublish, runPrReady, runPrReview, runPrVerify, scanFactoryTraceDiagnostics, scanFactoryTraceEvents, selectWaiversForCandidate, toFactoryTraceEnvelope, tryAppendReviewGateNotRequiredTraceEvent, validateBoundaryCheckProof, validateDagDocument, validateDemandWaiverStore, validateFactoryTraceEvent, validateMergeFreezeState, validatePrReadyProof, validatePrVerifyProof, validatePreviewLifecyclePlan, waivedDemandNotice, waivedDemandSchema, worktree_scratch_files_d_exports as worktreeScratchFiles };

package/dist/index.js

@@ -18,7 +18,7 @@ import { FACTORY_APP_BROKER_ORIGIN, FACTORY_APP_BROKER_PATH, FACTORY_CURSOR_OIDC
 import http from "node:http";
 import { pathToFileURL } from "node:url";
 //#region package.json
-var version = "1.0.0-alpha.29";
+var version = "1.0.0-alpha.30";
 //#endregion
 //#region src/cli-entry.ts
 /**
@@ -1694,6 +1694,24 @@ function assertCleanWorktreeForProof({ changedFiles, cwd, dirtyMessage, statusPo
 	if (offendingLines.length > 0) throw new Error(`${dirtyMessage}\n${offendingLines.join("\n")}`);
 }
 //#endregion
+//#region src/battery-shell-command.ts
+/** Quotes one argument for a POSIX shell, including embedded single quotes. */
+function singleQuote(value) {
+	return `'${value.replaceAll("'", String.raw`'\''`)}'`;
+}
+/**
+* Wraps a verification command so a login shell cannot demote the Node the
+* factory CLI is running on.
+*
+* `nodeBinDir` is the directory holding the running Node executable, so the
+* battery and the CLI always agree. The prefix is a separate line rather than a
+* `;` join: the command is profile-authored text that may already contain `&&`,
+* `;`, or a trailing comment, and a newline composes with all three.
+*/
+function withPinnedNodeOnPath(command, nodeBinDir) {
+	return `export PATH=${singleQuote(nodeBinDir)}:"$PATH"\n${command}`;
+}
+//#endregion
 //#region src/candidate-identity.ts
 /**
 * The same fallback for a patch id taken at an explicit ref rather than at
@@ -2459,12 +2477,8 @@ const resolveFindingBlocking = (finding, disposition = "open") => {
 	const severity = resolveReviewFindingSeverity(finding.priority);
 	return severity === "critical" || severity === "high" || severity === "unknown";
 };
-const DEFAULT_INTERIOR_REVIEW_CAP = 0;
 const FACTORY_REVIEW_CYCLE_CAP = 5;
-const resolveReviewLadderPolicy = () => ({
-	gate: { cap: FACTORY_REVIEW_CYCLE_CAP },
-	interior: { cap: DEFAULT_INTERIOR_REVIEW_CAP }
-});
+const resolveReviewLadderPolicy = () => ({ gate: { cap: FACTORY_REVIEW_CYCLE_CAP } });
 //#endregion
 //#region src/sha256-hex.ts
 const ROUND_CONSTANTS = new Uint32Array([
@@ -3879,7 +3893,7 @@ const validatedIngestEndpoint = (value) => {
 	const origin = validatedEndpoint(value);
 	return origin === void 0 ? void 0 : new URL(HQ_INGEST_PATH, origin.origin);
 };
-const retainRetryEntry = async (layout, entry, dependencies, deadline, options = {}) => {
+const retainRetryEntry = async (layout, entry, dependencies, deadline) => {
 	let customAppend;
 	try {
 		customAppend = dependencies.appendJournal;
@@ -3894,17 +3908,11 @@ const retainRetryEntry = async (layout, entry, dependencies, deadline, options =
 		return "failed";
 	}
 	const target = path.join(path.resolve(layout.root, ...layout.segments), `${randomUUID()}-${spoolFileName(entry)}`);
-	if (options.awaitCustom !== true) {
-		setImmediate(async () => {
-			try {
-				await customAppend(target, row);
-			} catch {}
-		}).unref();
-		return;
-	}
-	const outcome = await settleWithin((async () => customAppend(target, row))(), remainingMs(deadline));
-	if (outcome.status === "fulfilled") return;
-	return outcome.status === "timed-out" ? "timed-out" : "failed";
+	setImmediate(async () => {
+		try {
+			await customAppend(target, row);
+		} catch {}
+	}).unref();
 };
 const projectInputForHqIngest = async (input, deadline) => {
 	let profilePath;
@@ -3927,94 +3935,6 @@ const projectInputForHqIngest = async (input, deadline) => {
 		...input.subject === void 0 ? {} : { subject: input.subject }
 	};
 };
-async function handoffHqIngest(input, dependencies, setupDeadline) {
-	let config;
-	try {
-		if (!input.profile.hq?.enabled) return "skipped";
-		config = input.profile.hq;
-	} catch {
-		return "skipped";
-	}
-	const endpoint = validatedIngestEndpoint(config.endpoint);
-	if (!endpoint) {
-		await reportDiagnostic(dependencies, setupDeadline, "profile endpoint must be an HTTPS origin without embedded credentials", "HQ ingest skipped");
-		return "skipped";
-	}
-	let env;
-	try {
-		env = dependencies.env ?? process.env;
-	} catch {
-		await reportDiagnostic(dependencies, setupDeadline, "operator configuration is unavailable", "HQ ingest skipped");
-		return "skipped";
-	}
-	if (!(await loadAllowedOrigins(env, setupDeadline)).includes(endpoint.origin)) {
-		await reportDiagnostic(dependencies, setupDeadline, `endpoint origin ${endpoint.origin} is not authorized by hqAllowedOrigins in the operator user config`, "HQ ingest skipped");
-		return "skipped";
-	}
-	const flushDeadline = performance.now() + journalFlushBudgetFor(dependencies);
-	const now = dependencies.now ?? (() => /* @__PURE__ */ new Date());
-	const makeEventId = dependencies.randomUUID ?? randomUUID;
-	let event;
-	let dropped = false;
-	let reason = "closeout-advisory-handoff";
-	try {
-		const projectedPayload = await loadBoundedPayload(input, setupDeadline);
-		const eventId = makeEventId();
-		const observedAt = now().toISOString();
-		const repository = {
-			owner: input.profile.repository.owner,
-			repo: input.profile.repository.name
-		};
-		if (projectedPayload.status === "dropped") {
-			dropped = true;
-			const { reason: projectionReason } = projectedPayload;
-			reason = projectionReason;
-			const subject = inferredSubject(input, {});
-			event = {
-				eventId,
-				kind: input.kind,
-				observedAt,
-				repository,
-				schemaVersion: 1,
-				...subject === void 0 ? {} : { subject }
-			};
-		} else {
-			const subject = inferredSubject(input, projectedPayload.value);
-			event = {
-				eventId,
-				kind: input.kind,
-				observedAt,
-				payload: projectedPayload.value,
-				repository,
-				schemaVersion: projectedPayload.value.schemaVersion,
-				...subject === void 0 ? {} : { subject }
-			};
-		}
-	} catch {
-		await reportDiagnostic(dependencies, flushDeadline, "closeout advisory handoff could not construct an event");
-		return "held";
-	}
-	if (dropped || event === void 0) return "held";
-	let failedAt;
-	try {
-		failedAt = now().toISOString();
-	} catch {
-		failedAt = "unknown";
-	}
-	const retryEntry = {
-		endpoint: endpoint.href,
-		event,
-		failedAt,
-		reason
-	};
-	const writeLayout = repositorySpoolLayout({
-		owner: input.profile.repository.owner,
-		repo: input.profile.repository.name
-	}, env);
-	const journalFailure = dependencies.appendJournal === void 0 ? await appendCloseoutSpool(writeLayout, retryEntry, flushDeadline) : await retainRetryEntry(writeLayout, retryEntry, dependencies, flushDeadline, { awaitCustom: true });
-	if (journalFailure) await reportDiagnostic(dependencies, flushDeadline, `closeout advisory handoff local spool ${journalFailure}`);
-	return journalFailure === void 0 && !dropped ? "deferred" : "held";
-}
 /**
 * A bounded read of the ingest receipt body. Only the explicit drain asks for
 * it: the gate path must not add a body read to its transport leg. Nothing but
@@ -4767,28 +4687,6 @@ function enqueueProjectHqIngest(input, dependencies = {}) {
 		return Promise.resolve("skipped");
 	}
 }
-/**
-* Persists an advisory closeout event for a later normal HQ sink drain. Unlike
-* enqueueProjectHqIngest, this never starts a network request or enters the
-* process-exit lifecycle registry, so local closeout cannot wait on HQ.
-*/
-async function deferProjectHqIngestDirect(input, dependencies) {
-	try {
-		const setupDeadline = performance.now() + timeoutFor(dependencies);
-		const projectInput = await projectInputForHqIngest(input, setupDeadline);
-		if (projectInput === void 0) return "skipped";
-		return await handoffHqIngest(projectInput, dependencies, setupDeadline);
-	} catch {
-		return "held";
-	}
-}
-const hasCloseoutHandoffCustomization = (dependencies) => {
-	try {
-		return Reflect.ownKeys(dependencies).length > 0;
-	} catch {
-		return true;
-	}
-};
 const ISOLATED_CLOSEOUT_FS_WORKER_SOURCE = String.raw`
   const crypto = require("node:crypto");
   const fs = require("node:fs");
@@ -5045,8 +4943,8 @@ const runCloseoutFsWorker = async (data, budgetMs) => {
 	});
 };
 const isIsolatedReadResult = (value) => value !== null && typeof value === "object" && value.status === "read";
-const deferProjectHqIngestIsolated = async (input) => {
-	const setupDeadline = performance.now() + timeoutFor({ env: process.env });
+const deferProjectHqIngestIsolated = async (input, env) => {
+	const setupDeadline = performance.now() + timeoutFor({ env });
 	let profilePath;
 	try {
 		profilePath = input.profilePath ? path.resolve(input.cwd, input.profilePath) : defaultProfilePath(input.cwd);
@@ -5071,7 +4969,7 @@ const deferProjectHqIngestIsolated = async (input) => {
 	let configPath;
 	let payloadPath;
 	try {
-		configPath = defaultUserConfigPath(process.env);
+		configPath = defaultUserConfigPath(env);
 		payloadPath = input.payloadJson === void 0 && input.payloadPath !== void 0 ? path.resolve(input.cwd, input.payloadPath) : void 0;
 	} catch {
 		return "skipped";
@@ -5131,19 +5029,34 @@ const deferProjectHqIngestIsolated = async (input) => {
 	const layout = repositorySpoolLayout({
 		owner: parsedProfile.repository.owner,
 		repo: parsedProfile.repository.name
-	}, process.env);
+	}, env);
 	const persisted = await runCloseoutFsWorker({
 		body,
 		eventId,
 		root: layout.root,
 		segments: layout.segments,
 		type: "persist"
-	}, journalFlushBudgetFor({ env: process.env }));
+	}, journalFlushBudgetFor({ env }));
 	return persisted !== null && typeof persisted === "object" && persisted.status === "persisted" ? "deferred" : "held";
 };
+/**
+* Persists an advisory closeout event for a later normal HQ sink drain. Unlike
+* enqueueProjectHqIngest, this never starts a network request or enters the
+* process-exit lifecycle registry, so local closeout cannot wait on HQ.
+*
+* There is one persistence implementation and it always runs in an unreferenced
+* worker, so no caller can select a main-thread variant whose durability and
+* confinement guarantees are proved separately. The only seam is the operator
+* environment the worker's budgets and spool location are read from.
+*/
 async function deferProjectHqIngest(input, dependencies = {}) {
-	if (!hasCloseoutHandoffCustomization(dependencies)) return deferProjectHqIngestIsolated(input);
-	return deferProjectHqIngestDirect(input, dependencies);
+	let env;
+	try {
+		env = dependencies.env ?? process.env;
+	} catch {
+		return "skipped";
+	}
+	return deferProjectHqIngestIsolated(input, env);
 }
 //#endregion
 //#region src/evidence-freshness.ts
@@ -8204,7 +8117,7 @@ function defaultPrVerifyGit() {
 		mergeBaseSha,
 		recognizeCatchUp: recognizeCatchUpCandidate,
 		runVerificationCommand(command, cwd, env) {
-			return verificationOutcomeOf(runInheritedTee("bash", ["-lc", command], cwd, env));
+			return verificationOutcomeOf(runInheritedTee("bash", ["-lc", withPinnedNodeOnPath(command, path.dirname(process.execPath))], cwd, env));
 		},
 		showFileAtRef,
 		stablePatchId: runStablePatchId,
@@ -9024,29 +8937,7 @@ const ladderCycleRefsFor = (cycles) => {
 		};
 	});
 };
-const interiorPosition = ({ interiorCount, openFindings, policy }) => {
-	const { cap } = policy.interior;
-	if (interiorCount > 0 && openFindings.length === 0) return {
-		nextAction: { kind: "advance-to-gate" },
-		stage: "interior-complete"
-	};
-	if (interiorCount >= cap) return {
-		forcedTransition: {
-			cap,
-			kind: "interior-cap-reached"
-		},
-		nextAction: { kind: "advance-to-gate" },
-		stage: "interior-complete"
-	};
-	return {
-		nextAction: {
-			cycle: interiorCount + 1,
-			kind: "run-interior-cycle"
-		},
-		stage: "interior"
-	};
-};
-const gatePosition = ({ blockingFindings, gateCount, openFindings, policy }) => {
+const resolveLadderPosition = ({ blockingFindings, gateCount, openFindings, policy }) => {
 	const { cap } = policy.gate;
 	if (gateCount === 0) return {
 		nextAction: {
@@ -9080,21 +8971,11 @@ const gatePosition = ({ blockingFindings, gateCount, openFindings, policy }) =>
 		stage: "gate"
 	};
 };
-const resolveLadderPosition = ({ blockingFindings, gateCount, interiorCount, openFindings, policy }) => gateCount > 0 || policy.interior.cap === 0 ? gatePosition({
-	blockingFindings,
-	gateCount,
-	openFindings,
-	policy
-}) : interiorPosition({
-	interiorCount,
-	openFindings,
-	policy
-});
-const executedStageFor = (ref, _policy) => {
+const executedStageFor = (ref) => {
 	if (ref.stage === "gate") return "gate";
 	return "interior";
 };
-const eventFor = ({ cycles, openFindings, blockingFindings, policy, position, staleRepeats, refs }) => {
+const eventFor = ({ cycles, openFindings, blockingFindings, position, staleRepeats, refs }) => {
 	const latest = cycles.at(-1);
 	const latestRef = refs.at(-1);
 	if (!latest || !latestRef) return;
@@ -9113,7 +8994,7 @@ const eventFor = ({ cycles, openFindings, blockingFindings, policy, position, st
 		...latest.model === void 0 ? {} : { model: latest.model },
 		payloadVersion: 1,
 		...latest.session ? { session: latest.session } : {},
-		stage: executedStageFor(latestRef, policy),
+		stage: executedStageFor(latestRef),
 		type: "review-ladder-stage",
 		...latest.usage ? { usage: latest.usage } : {}
 	};
@@ -9130,26 +9011,19 @@ const evaluateReviewLadder = ({ cycles, policy }) => {
 	const position = resolveLadderPosition({
 		blockingFindings,
 		gateCount,
-		interiorCount,
 		openFindings,
 		policy
 	});
-	const diagnostics = policy.interior.cap > 0 && interiorCount === 0 && gateCount > 0 ? [{
-		code: "interior-cycles-unrecorded",
-		message: `Ladder policy configures an interior loop (cap ${policy.interior.cap}) but the history contains no interior cycles; the gate is proceeding without interior evidence.`
-	}] : [];
 	return {
 		...position,
 		cycleCounts: {
 			gate: gateCount,
 			interior: interiorCount
 		},
-		diagnostics,
 		event: eventFor({
 			blockingFindings,
 			cycles,
 			openFindings,
-			policy,
 			position,
 			refs,
 			staleRepeats
@@ -9325,7 +9199,6 @@ var review_proof_exports = /* @__PURE__ */ __exportAll({
 	prReviewFindingSchema: () => prReviewFindingSchema,
 	prReviewProofSchema: () => prReviewProofSchema,
 	prReviewResultSchema: () => prReviewResultSchema,
-	readPrReviewProof: () => readPrReviewProof,
 	resolveReviewAcceptance: () => resolveReviewAcceptance,
 	resolveReviewTerminalState: () => resolveReviewTerminalState,
 	resolveReviewTerminalStateAcrossReviews: () => resolveReviewTerminalStateAcrossReviews,
@@ -9451,7 +9324,6 @@ const validatePrReviewProof = (value) => {
 	}
 	return parsed.data;
 };
-const readPrReviewProof = (filePath) => readProofFromPath(validatePrReviewProof, filePath);
 const PR_REVIEW_PROOF_DESCRIPTOR = {
 	defaultPath: DEFAULT_PR_REVIEW_PROOF_PATH,
 	label: "pr:review proof",
@@ -17753,7 +17625,6 @@ function ladderStateForRun({ declaredDispositions, cycle, historical, identity,
 		policy
 	});
 	if (evaluation.unmatchedDispositions.length > 0) throw new Error(`Dispositions were dropped at fold time — they matched no flagged finding in the ladder history: ${evaluation.unmatchedDispositions.map((declaration) => declaration.finding.title).join("; ")}. The fold and the pre-run --dispositions validation disagree; nothing was persisted.`);
-	for (const diagnostic of evaluation.diagnostics) console.error(`[${diagnostic.code}] ${diagnostic.message}`);
 	return {
 		evaluation,
 		ladder: { cycles }
@@ -20327,4 +20198,4 @@ async function run(argv = process.argv, cliEntry = factoryCliEntry()) {
 	}
 }
 //#endregion
-export { DEFAULT_DEMAND_WAIVER_PATH, DEFAULT_FACTORY_REPOSITORY, DEFAULT_ROOT_SHARED_GLOBS, DemandWaiveRefusalError, EMPTY_TREE_OBJECT_HASH, EPIC_STRUCTURE_NODE_STATUSES, EPIC_STRUCTURE_SCHEMA_VERSION, EpicStructureValidationError, FACTORY_BASE_REF_ENV, FACTORY_CHANGED_FILES_ENV, FACTORY_CHANGED_FILES_FILE_ENV, FactoryCliInvocationSchema, FollowUpActionSchema, MERGE_FREEZE_APP_SLUG, MERGE_FREEZE_CHECK_NAME, PrPublishFollowUpError, REVIEW_FOCUS_SECTION, WorkerCheckoutGuardError, appendReviewLadderStageTraceEvent, appendWithTraceSinks, applyDemandWaiver, assembleReviewPrompt, assertFactoryPrStatusIdentity, assertWorkerCheckoutAllowed, authorizeDemandWaiver, batteryScopeSummaryLines, blockingLadderFindings, boundary_manifest_exports as boundaryManifest, boundary_review_proof_exports as boundaryReviewProof, buildEpicStructureEvent, buildEpicStructurePayload, buildEvidenceEnvelope, buildReviewGateNotRequiredTraceEvent, buildReviewLadderStageTraceEvent, comment_provenance_exports as commentProvenance, createGitHubCheckRunMergeFreezeStore, createLocalJsonlTraceSink, createProgram, createVerificationRunContext, doctorProjectProfile, epicStructureEventId, evaluateReviewLadder, evidenceEnvelopeFilename, findingKey, followUpFromArgv, impactStampScopeDecision, inferFixedInThreadDispositions, isProductionHqUrl, loadProjectProfile, normalizeIssueComments, openLadderFindings, planFactoryPrStatusHud, planPreviewLifecycle, planPublishFollowUp, planVerificationBattery, readiness_evaluation_exports as prReadinessEvaluation, external_evidence_exports as prReadinessExternalEvidence, pr_body_renderer_exports as prReadinessPrBodyRenderer, proof_identity_exports as prReadinessProofIdentity, review_proof_exports as prReadinessReviewProof, status_check_rollup_exports as prReadinessStatusChecks, verification_proof_exports as prReadinessVerificationProof, presentFactoryPrStatusHud, previewLifecycleTargets, publishEpicStructure, readDemandWaivers, readFactoryPrStatusSources, readPrReadyProof, readPrReviewProof, refreshFactoryPrStatusHud, refreshFactoryPrStatusHudSafely, renderFactoryPrStatusHud, resolveFactoryRepository, resolveFindingBlocking, resolveReviewFindingCategory, resolveReviewFindingSeverity, resolveReviewLadderPolicy, resolveTraceWriteSinks, reviewCycleStateFor, reviewFocusFromIssueBody, reviewPromptSectionSchema, reviewPromptSectionsSchema, run, runBoundaryCheck, runDemandWaive, runEvidenceEmit, runPrPublish, runPrReady, runPrReview, runPrVerify, scanFactoryTraceDiagnostics, scanFactoryTraceEvents, selectWaiversForCandidate, staleRepeatLadderFindings, toFactoryTraceEnvelope, tryAppendReviewGateNotRequiredTraceEvent, tryAppendReviewLadderStageTraceEvent, validateBoundaryCheckProof, validateDagDocument, validateDemandWaiverStore, validateFactoryTraceEvent, validateMergeFreezeState, validatePrReadyProof, validatePrReviewProof, validatePrVerifyProof, validatePreviewLifecyclePlan, waivedDemandNotice, waivedDemandSchema, worktree_scratch_files_exports as worktreeScratchFiles };
+export { DEFAULT_DEMAND_WAIVER_PATH, DEFAULT_FACTORY_REPOSITORY, DEFAULT_ROOT_SHARED_GLOBS, DemandWaiveRefusalError, EMPTY_TREE_OBJECT_HASH, EPIC_STRUCTURE_NODE_STATUSES, EPIC_STRUCTURE_SCHEMA_VERSION, EpicStructureValidationError, FACTORY_BASE_REF_ENV, FACTORY_CHANGED_FILES_ENV, FACTORY_CHANGED_FILES_FILE_ENV, FactoryCliInvocationSchema, FollowUpActionSchema, MERGE_FREEZE_APP_SLUG, MERGE_FREEZE_CHECK_NAME, PrPublishFollowUpError, REVIEW_FOCUS_SECTION, WorkerCheckoutGuardError, appendWithTraceSinks, applyDemandWaiver, assembleReviewPrompt, assertFactoryPrStatusIdentity, assertWorkerCheckoutAllowed, authorizeDemandWaiver, batteryScopeSummaryLines, boundary_manifest_exports as boundaryManifest, boundary_review_proof_exports as boundaryReviewProof, buildEpicStructureEvent, buildEpicStructurePayload, buildEvidenceEnvelope, buildReviewGateNotRequiredTraceEvent, comment_provenance_exports as commentProvenance, createGitHubCheckRunMergeFreezeStore, createLocalJsonlTraceSink, createProgram, createVerificationRunContext, doctorProjectProfile, epicStructureEventId, evidenceEnvelopeFilename, followUpFromArgv, impactStampScopeDecision, isProductionHqUrl, loadProjectProfile, normalizeIssueComments, planFactoryPrStatusHud, planPreviewLifecycle, planPublishFollowUp, planVerificationBattery, readiness_evaluation_exports as prReadinessEvaluation, external_evidence_exports as prReadinessExternalEvidence, pr_body_renderer_exports as prReadinessPrBodyRenderer, proof_identity_exports as prReadinessProofIdentity, review_proof_exports as prReadinessReviewProof, status_check_rollup_exports as prReadinessStatusChecks, verification_proof_exports as prReadinessVerificationProof, presentFactoryPrStatusHud, previewLifecycleTargets, publishEpicStructure, readDemandWaivers, readFactoryPrStatusSources, readPrReadyProof, refreshFactoryPrStatusHud, refreshFactoryPrStatusHudSafely, renderFactoryPrStatusHud, resolveFactoryRepository, resolveTraceWriteSinks, reviewFocusFromIssueBody, reviewPromptSectionSchema, reviewPromptSectionsSchema, run, runBoundaryCheck, runDemandWaive, runEvidenceEmit, runPrPublish, runPrReady, runPrReview, runPrVerify, scanFactoryTraceDiagnostics, scanFactoryTraceEvents, selectWaiversForCandidate, toFactoryTraceEnvelope, tryAppendReviewGateNotRequiredTraceEvent, validateBoundaryCheckProof, validateDagDocument, validateDemandWaiverStore, validateFactoryTraceEvent, validateMergeFreezeState, validatePrReadyProof, validatePrVerifyProof, validatePreviewLifecyclePlan, waivedDemandNotice, waivedDemandSchema, worktree_scratch_files_exports as worktreeScratchFiles };

package/dist/schemas.d.ts

@@ -432,12 +432,12 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       "interior-cap-reached": "interior-cap-reached";
     }>>;
     nextAction: z.ZodEnum<{
+      "run-interior-cycle": "run-interior-cycle";
+      "advance-to-gate": "advance-to-gate";
       "run-gate-cycle": "run-gate-cycle";
       "accept-nonblocking-findings": "accept-nonblocking-findings";
       "escalate-to-triage": "escalate-to-triage";
       "ready-for-human": "ready-for-human";
-      "advance-to-gate": "advance-to-gate";
-      "run-interior-cycle": "run-interior-cycle";
     }>;
     stage: z.ZodEnum<{
       gate: "gate";
@@ -903,8 +903,8 @@ declare const closeoutArtifactSchema: z.ZodObject<{
     }, z.core.$strict>;
     unit: z.ZodEnum<{
       boolean: "boolean";
-      text: "text";
       count: "count";
+      text: "text";
       tokens: "tokens";
       usd: "usd";
     }>;
@@ -1201,12 +1201,12 @@ declare const prReadyProofSchema: z.ZodObject<{
         "interior-cap-reached": "interior-cap-reached";
       }>>;
       nextAction: z.ZodEnum<{
+        "run-interior-cycle": "run-interior-cycle";
+        "advance-to-gate": "advance-to-gate";
         "run-gate-cycle": "run-gate-cycle";
         "accept-nonblocking-findings": "accept-nonblocking-findings";
         "escalate-to-triage": "escalate-to-triage";
         "ready-for-human": "ready-for-human";
-        "advance-to-gate": "advance-to-gate";
-        "run-interior-cycle": "run-interior-cycle";
       }>;
       stage: z.ZodEnum<{
         gate: "gate";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patronage/software-factory",
-  "version": "1.0.0-alpha.29",
+  "version": "1.0.0-alpha.30",
   "description": "Shared Patronage software factory CLI and project-profile validation tools",
   "license": "MIT",
   "repository": {
@@ -37,7 +37,7 @@
     "picomatch": "^4.0.5",
     "yaml": "^2.9.0",
     "zod": "4.4.3",
-    "@patronage/factory-ci": "1.0.0-alpha.29"
+    "@patronage/factory-ci": "1.0.0-alpha.30"
   },
   "devDependencies": {
     "@types/node": "24.13.3",