@patronage/software-factory 1.0.0-alpha.33 → 1.0.0-alpha.34

package/dist/index.d.ts

@@ -17,8 +17,8 @@ declare const boundaryManifestBaseSchema: z.ZodObject<{
   boundary: z.ZodString;
   closeout: z.ZodOptional<z.ZodObject<{
     review: z.ZodEnum<{
-      oracle: "oracle";
       "independent-model": "independent-model";
+      oracle: "oracle";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -26,8 +26,8 @@ declare const boundaryManifestBaseSchema: z.ZodObject<{
   integrationBranch: z.ZodOptional<z.ZodString>;
   schemaVersion: z.ZodLiteral<1>;
   topology: z.ZodEnum<{
-    flagged: "flagged";
     "each-to-main": "each-to-main";
+    flagged: "flagged";
     stacked: "stacked";
     "each-to-epic": "each-to-epic";
   }>;
@@ -36,8 +36,8 @@ declare const boundaryManifestBaseSchema: z.ZodObject<{
     issues: z.ZodArray<z.ZodNumber>;
     name: z.ZodString;
     review: z.ZodEnum<{
-      oracle: "oracle";
       "independent-model": "independent-model";
+      oracle: "oracle";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -46,8 +46,8 @@ declare const boundaryManifestSchema: z.ZodObject<{
   boundary: z.ZodString;
   closeout: z.ZodOptional<z.ZodObject<{
     review: z.ZodEnum<{
-      oracle: "oracle";
       "independent-model": "independent-model";
+      oracle: "oracle";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -55,8 +55,8 @@ declare const boundaryManifestSchema: z.ZodObject<{
   integrationBranch: z.ZodOptional<z.ZodString>;
   schemaVersion: z.ZodLiteral<1>;
   topology: z.ZodEnum<{
-    flagged: "flagged";
     "each-to-main": "each-to-main";
+    flagged: "flagged";
     stacked: "stacked";
     "each-to-epic": "each-to-epic";
   }>;
@@ -65,8 +65,8 @@ declare const boundaryManifestSchema: z.ZodObject<{
     issues: z.ZodArray<z.ZodNumber>;
     name: z.ZodString;
     review: z.ZodEnum<{
-      oracle: "oracle";
       "independent-model": "independent-model";
+      oracle: "oracle";
       human: "human";
     }>;
   }, z.core.$loose>>;
@@ -151,8 +151,8 @@ declare const boundaryReviewProofBaseSchema: z.ZodObject<{
   }>;
   producer: z.ZodString;
   rung: z.ZodEnum<{
-    oracle: "oracle";
     "independent-model": "independent-model";
+    oracle: "oracle";
     human: "human";
   }>;
   schemaVersion: z.ZodLiteral<1>;
@@ -195,8 +195,8 @@ declare const boundaryReviewProofSchema: z.ZodObject<{
   }>;
   producer: z.ZodString;
   rung: z.ZodEnum<{
-    oracle: "oracle";
     "independent-model": "independent-model";
+    oracle: "oracle";
     human: "human";
   }>;
   schemaVersion: z.ZodLiteral<1>;
@@ -1423,6 +1423,16 @@ declare const mergeFreezeStateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   reason: z.ZodString;
   recordedAt: z.ZodISODateTime;
   schemaVersion: z.ZodLiteral<1>;
+  verification: z.ZodOptional<z.ZodObject<{
+    jobs: z.ZodRecord<z.ZodString, z.ZodEnum<{
+      success: "success";
+      failure: "failure";
+      cancelled: "cancelled";
+      skipped: "skipped";
+    }>>;
+    runAttempt: z.ZodNumber;
+    runId: z.ZodNumber;
+  }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
   active: z.ZodLiteral<false>;
   clearRationale: z.ZodOptional<z.ZodString>;
@@ -1432,6 +1442,16 @@ declare const mergeFreezeStateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   reason: z.ZodString;
   recordedAt: z.ZodISODateTime;
   schemaVersion: z.ZodLiteral<1>;
+  verification: z.ZodOptional<z.ZodObject<{
+    jobs: z.ZodRecord<z.ZodString, z.ZodEnum<{
+      success: "success";
+      failure: "failure";
+      cancelled: "cancelled";
+      skipped: "skipped";
+    }>>;
+    runAttempt: z.ZodNumber;
+    runId: z.ZodNumber;
+  }, z.core.$strip>>;
 }, z.core.$strip>], "active">;
 type MergeFreezeState = z.infer<typeof mergeFreezeStateSchema>;
 /**
@@ -1666,8 +1686,8 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       reviewedHeadSha: z.ZodOptional<z.ZodString>;
       reviewedPatchId: z.ZodOptional<z.ZodString>;
       status: z.ZodEnum<{
-        "not-required": "not-required";
         stale: "stale";
+        "not-required": "not-required";
         blocked: "blocked";
         current: "current";
         missing: "missing";
@@ -1678,8 +1698,8 @@ declare const managedReadinessLedgerSchema: z.ZodObject<{
       reviewedHeadSha: z.ZodOptional<z.ZodString>;
       reviewedPatchId: z.ZodOptional<z.ZodString>;
       status: z.ZodEnum<{
-        "not-required": "not-required";
         stale: "stale";
+        "not-required": "not-required";
         blocked: "blocked";
         current: "current";
         missing: "missing";
@@ -2668,8 +2688,8 @@ declare const evidenceEnvelopeBaseSchema: z.ZodObject<{
   producer: z.ZodString;
   requestId: z.ZodOptional<z.ZodString>;
   rung: z.ZodOptional<z.ZodEnum<{
-    oracle: "oracle";
     "independent-model": "independent-model";
+    oracle: "oracle";
     human: "human";
   }>>;
   schemaVersion: z.ZodLiteral<1>;
@@ -2695,8 +2715,8 @@ declare const evidenceEnvelopeSchema: z.ZodObject<{
   producer: z.ZodString;
   requestId: z.ZodOptional<z.ZodString>;
   rung: z.ZodOptional<z.ZodEnum<{
-    oracle: "oracle";
     "independent-model": "independent-model";
+    oracle: "oracle";
     human: "human";
   }>>;
   schemaVersion: z.ZodLiteral<1>;
@@ -2798,8 +2818,8 @@ declare const loadEvidenceEnvelopes: (cwd: string) => LoadedEvidenceEnvelope[];
 //#region src/review-proof-applicability.d.ts
 declare const REVIEW_STATUS_VALUES: readonly ["not-required", "current", "stale", "missing", "blocked"];
 declare const reviewStatusSchema: z.ZodEnum<{
-  "not-required": "not-required";
   stale: "stale";
+  "not-required": "not-required";
   blocked: "blocked";
   current: "current";
   missing: "missing";
@@ -2916,8 +2936,8 @@ declare const boundaryCheckProofSchema: z.ZodObject<{
     wave: z.ZodString;
   }, z.core.$strip>>;
   demandedRung: z.ZodOptional<z.ZodEnum<{
-    oracle: "oracle";
     "independent-model": "independent-model";
+    oracle: "oracle";
     human: "human";
   }>>;
   epicIssue: z.ZodNumber;
@@ -2932,8 +2952,8 @@ declare const boundaryCheckProofSchema: z.ZodObject<{
     commentUrl: z.ZodOptional<z.ZodString>;
     producer: z.ZodString;
     rung: z.ZodEnum<{
-      oracle: "oracle";
       "independent-model": "independent-model";
+      oracle: "oracle";
       human: "human";
     }>;
     sessionId: z.ZodOptional<z.ZodString>;
@@ -3577,18 +3597,18 @@ declare const LegacyWorkerCloseoutStatusTraceEventSchema: z.ZodObject<{
   threadId: z.ZodOptional<z.ZodString>;
   workerId: z.ZodOptional<z.ZodString>;
   archiveStatus: z.ZodOptional<z.ZodEnum<{
+    skipped: "skipped";
     unavailable: "unavailable";
     archived: "archived";
-    skipped: "skipped";
     "not-applicable": "not-applicable";
     pending: "pending";
   }>>;
   closeoutReason: z.ZodOptional<z.ZodString>;
   eventType: z.ZodLiteral<"worker-closeout-lessons">;
   lessonStatus: z.ZodOptional<z.ZodEnum<{
+    skipped: "skipped";
     captured: "captured";
     unavailable: "unavailable";
-    skipped: "skipped";
   }>>;
   lessonSummary: z.ZodOptional<z.ZodString>;
   typeVersion: z.ZodLiteral<2>;
@@ -3975,18 +3995,18 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   threadId: z.ZodOptional<z.ZodString>;
   workerId: z.ZodOptional<z.ZodString>;
   archiveStatus: z.ZodOptional<z.ZodEnum<{
+    skipped: "skipped";
     unavailable: "unavailable";
     archived: "archived";
-    skipped: "skipped";
     "not-applicable": "not-applicable";
     pending: "pending";
   }>>;
   closeoutReason: z.ZodOptional<z.ZodString>;
   eventType: z.ZodLiteral<"worker-closeout-lessons">;
   lessonStatus: z.ZodOptional<z.ZodEnum<{
+    skipped: "skipped";
     captured: "captured";
     unavailable: "unavailable";
-    skipped: "skipped";
   }>>;
   lessonSummary: z.ZodOptional<z.ZodString>;
   typeVersion: z.ZodLiteral<2>;
@@ -4016,17 +4036,17 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   }, z.core.$strict>], "lessonStatus">;
   readonly 2: z.ZodObject<{
     archiveStatus: z.ZodOptional<z.ZodEnum<{
+      skipped: "skipped";
       unavailable: "unavailable";
       archived: "archived";
-      skipped: "skipped";
       "not-applicable": "not-applicable";
       pending: "pending";
     }>>;
     closeoutReason: z.ZodOptional<z.ZodString>;
     lessonStatus: z.ZodOptional<z.ZodEnum<{
+      skipped: "skipped";
       captured: "captured";
       unavailable: "unavailable";
-      skipped: "skipped";
     }>>;
     lessonSummary: z.ZodOptional<z.ZodString>;
     observedAt: z.ZodString;
@@ -4138,8 +4158,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   interiorCycle: z.ZodOptional<z.ZodNumber>;
   observedAt: z.ZodString;
   purpose: z.ZodEnum<{
-    code: "code";
     review: "review";
+    code: "code";
   }>;
   slotResolution: z.ZodObject<{
     effort: z.ZodEnum<{
@@ -4157,18 +4177,18 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     }>;
     model: z.ZodString;
     tier: z.ZodEnum<{
+      oracle: "oracle";
       review: "review";
       delegate: "delegate";
-      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
   }, z.core.$strict>;
   startedAt: z.ZodString;
   tier: z.ZodEnum<{
+    oracle: "oracle";
     review: "review";
     delegate: "delegate";
-    oracle: "oracle";
     workhorse: "workhorse";
     scout: "scout";
   }>;
@@ -4217,8 +4237,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   interiorCycle: z.ZodOptional<z.ZodNumber>;
   observedAt: z.ZodString;
   purpose: z.ZodEnum<{
-    code: "code";
     review: "review";
+    code: "code";
   }>;
   slotResolution: z.ZodObject<{
     effort: z.ZodEnum<{
@@ -4236,18 +4256,18 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     }>;
     model: z.ZodString;
     tier: z.ZodEnum<{
+      oracle: "oracle";
       review: "review";
       delegate: "delegate";
-      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
   }, z.core.$strict>;
   startedAt: z.ZodString;
   tier: z.ZodEnum<{
+    oracle: "oracle";
     review: "review";
     delegate: "delegate";
-    oracle: "oracle";
     workhorse: "workhorse";
     scout: "scout";
   }>;
@@ -4287,8 +4307,8 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
     interiorCycle: z.ZodOptional<z.ZodNumber>;
     observedAt: z.ZodString;
     purpose: z.ZodEnum<{
-      code: "code";
       review: "review";
+      code: "code";
     }>;
     slotResolution: z.ZodObject<{
       effort: z.ZodEnum<{
@@ -4306,18 +4326,18 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
       }>;
       model: z.ZodString;
       tier: z.ZodEnum<{
+        oracle: "oracle";
         review: "review";
         delegate: "delegate";
-        oracle: "oracle";
         workhorse: "workhorse";
         scout: "scout";
       }>;
     }, z.core.$strict>;
     startedAt: z.ZodString;
     tier: z.ZodEnum<{
+      oracle: "oracle";
       review: "review";
       delegate: "delegate";
-      oracle: "oracle";
       workhorse: "workhorse";
       scout: "scout";
     }>;
@@ -4360,17 +4380,17 @@ declare const FACTORY_TRACE_EVENT_DEFINITIONS: readonly [DefinedTraceEvent<"revi
   exitCode: number | null;
   harness: string;
   observedAt: string;
-  purpose: "code" | "review";
+  purpose: "review" | "code";
   slotResolution: {
     effort: "high" | "low" | "medium" | "xhigh";
     engine: string;
     layerSource: "committedDefault" | "operatorSession" | "userConfig";
     model: string;
-    tier: "review" | "delegate" | "oracle" | "workhorse" | "scout";
+    tier: "oracle" | "review" | "delegate" | "workhorse" | "scout";
     fallbackTier?: "delegate" | undefined;
   };
   startedAt: string;
-  tier: "review" | "delegate" | "oracle" | "workhorse" | "scout";
+  tier: "oracle" | "review" | "delegate" | "workhorse" | "scout";
   tokenUsage: {
     source: "cursor-csv" | "codex-json" | "cursor-json" | "claude-json";
     status: "available";
@@ -4714,13 +4734,13 @@ declare const evaluateReadiness: (input: EvaluationInput) => {
     reviews: {
       correctness: {
         required: boolean;
-        status: "not-required" | "stale" | "blocked" | "current" | "missing";
+        status: "stale" | "not-required" | "blocked" | "current" | "missing";
         reviewedHeadSha?: string | undefined;
         reviewedPatchId?: string | undefined;
       };
       security?: {
         required: boolean;
-        status: "not-required" | "stale" | "blocked" | "current" | "missing";
+        status: "stale" | "not-required" | "blocked" | "current" | "missing";
         reviewedHeadSha?: string | undefined;
         reviewedPatchId?: string | undefined;
       } | undefined;

package/dist/index.js

@@ -20,7 +20,7 @@ import http from "node:http";
 import { pathToFileURL } from "node:url";
 //#region package.json
 var name = "@patronage/software-factory";
-var version = "1.0.0-alpha.33";
+var version = "1.0.0-alpha.34";
 //#endregion
 //#region src/cli-entry.ts
 /**
@@ -1349,7 +1349,11 @@ function resolveDiffBase(cwd, base) {
 	}
 }
 function statusPorcelain(cwd) {
-	return runCapture("git", ["status", "--porcelain"], cwd).stdout.trim();
+	return runCapture("git", [
+		"status",
+		"--porcelain",
+		"--untracked-files=all"
+	], cwd).stdout.trim();
 }
 function filesFromNameStatus(value) {
 	return value.split("\n").filter(Boolean).flatMap((line) => {
@@ -2507,27 +2511,9 @@ function tryReadProof(read, filePath) {
 function readOptionalProof(read, filePath) {
 	return tryReadProof(read, filePath).proof;
 }
-const normalizeStatusPath = (filePath) => filePath.replaceAll("\\", "/").replace(/^\.\//u, "");
-const decodeStatusPath = (filePath) => {
-	const trimmed = filePath.trim();
-	if (trimmed.startsWith("\"") && trimmed.endsWith("\"")) try {
-		return JSON.parse(trimmed);
-	} catch {}
-	return trimmed;
-};
-const statusLinePaths = (line) => {
-	const xyStatus = line.slice(0, 2);
-	const porcelainPath = line.slice(3);
-	return xyStatus[0] === "R" || xyStatus[0] === "C" || xyStatus[1] === "R" || xyStatus[1] === "C" ? porcelainPath.split(" -> ").map(decodeStatusPath) : [decodeStatusPath(porcelainPath)];
-};
-function assertCleanWorktreeForProof({ changedFiles, cwd, dirtyMessage, statusPorcelain }) {
+function assertCleanWorktreeForProof({ cwd, dirtyMessage, statusPorcelain }) {
 	const status = statusPorcelain(cwd);
-	const changedFileSet = new Set(changedFiles.map(normalizeStatusPath));
-	const offendingLines = status.split("\n").filter((line) => {
-		if (line.length < 3) return false;
-		return statusLinePaths(line).some((filePath) => changedFileSet.has(normalizeStatusPath(filePath)));
-	});
-	if (offendingLines.length > 0) throw new Error(`${dirtyMessage}\n${offendingLines.join("\n")}`);
+	if (status.trim().length > 0) throw new Error(`${dirtyMessage}\n${status}`);
 }
 //#endregion
 //#region src/battery-shell-command.ts
@@ -9188,6 +9174,11 @@ function runPrVerify(args, dependencies = {}) {
 		});
 	};
 	try {
+		assertCleanWorktreeForProof({
+			cwd,
+			dirtyMessage: "pr:verify requires committed input; the worktree is dirty. Commit changes or use a clean isolated checkout before verification.",
+			statusPorcelain: git.statusPorcelain
+		});
 		for (const command of commands) {
 			if (scopedOutNames.has(command.name)) continue;
 			console.log(`\n> ${command.name}: ${command.command}`);
@@ -9236,11 +9227,11 @@ function runPrVerify(args, dependencies = {}) {
 			}
 		}
 		assertCleanWorktreeForProof({
-			changedFiles: files,
 			cwd,
 			dirtyMessage: "pr:verify passed, but the worktree is dirty. Commit or stash changes before writing typed proof.",
 			statusPorcelain: git.statusPorcelain
 		});
+		if (git.currentHeadSha(cwd) !== headSha) throw new Error("pr:verify candidate HEAD changed during verification. Re-run verification on the final committed head.");
 		const previousProof = readPreviousPrVerifyProof(cwd, output);
 		const baselineFullProofs = resolvedMode === "docs-only" ? baselineFullProofsForDocsOnly({
 			previousProof,
@@ -15998,6 +15989,16 @@ const MERGE_FREEZE_SCHEMA_VERSION = 1;
 const CHECK_RUNS_PER_PAGE$1 = 100;
 const CHECK_RUN_PAGE_LIMIT$1 = 10;
 const shaSchema$2 = z.string().regex(/^[0-9a-f]{40}$/u);
+const verificationSchema = z.object({
+	jobs: z.record(z.string(), z.enum([
+		"success",
+		"failure",
+		"cancelled",
+		"skipped"
+	])),
+	runAttempt: z.number().int().positive(),
+	runId: z.number().int().positive()
+});
 const activeMergeFreezeStateSchema = z.object({
 	active: z.literal(true),
 	generationId: z.number().int().positive(),
@@ -16005,7 +16006,8 @@ const activeMergeFreezeStateSchema = z.object({
 	outcome: z.enum(["active", "stale"]),
 	reason: z.string().min(1),
 	recordedAt: z.iso.datetime(),
-	schemaVersion: z.literal(MERGE_FREEZE_SCHEMA_VERSION)
+	schemaVersion: z.literal(MERGE_FREEZE_SCHEMA_VERSION),
+	verification: verificationSchema.optional()
 });
 const inactiveMergeFreezeStateSchema = z.object({
 	active: z.literal(false),
@@ -16015,7 +16017,8 @@ const inactiveMergeFreezeStateSchema = z.object({
 	outcome: z.literal("inactive"),
 	reason: z.string().min(1),
 	recordedAt: z.iso.datetime(),
-	schemaVersion: z.literal(MERGE_FREEZE_SCHEMA_VERSION)
+	schemaVersion: z.literal(MERGE_FREEZE_SCHEMA_VERSION),
+	verification: verificationSchema.optional()
 });
 const mergeFreezeStateSchema = z.discriminatedUnion("active", [activeMergeFreezeStateSchema, inactiveMergeFreezeStateSchema]);
 /**
@@ -19726,7 +19729,6 @@ async function runPrReview(args, dependencies = {}) {
 	});
 	const files = git.changedFiles(cwd, base.sha);
 	assertCleanWorktreeForProof({
-		changedFiles: files,
 		cwd,
 		dirtyMessage: "pr:review requires a clean worktree so proof matches committed PR content.",
 		statusPorcelain: git.statusPorcelain
@@ -20872,6 +20874,8 @@ const workflowRunJobSchema = z.object({
 	head_sha: z.string(),
 	id: z.number().int(),
 	name: z.string(),
+	run_attempt: z.number().int().positive(),
+	run_id: z.number().int().positive(),
 	steps: z.array(z.object({
 		conclusion: z.string().nullable(),
 		name: z.string()
@@ -20882,7 +20886,8 @@ const workflowRunRecordSchema = z.object({
 	head_sha: z.string(),
 	id: z.number().int(),
 	path: z.string(),
-	repository: z.object({ full_name: z.string() })
+	repository: z.object({ full_name: z.string() }),
+	run_attempt: z.number().int().positive()
 });
 /** The deployment environment one target's receipts live in. */
 const deploymentReceiptEnvironment = (target) => target;
@@ -20931,20 +20936,27 @@ const trustReceipt = (args, deployment) => {
 	const { receipt } = bound;
 	let runRecord;
 	let jobRecords;
+	let latestRunRecord;
 	try {
-		runRecord = args.transport.getWorkflowRun(receipt.workflow.runId);
-		jobRecords = args.transport.listWorkflowRunJobs(receipt.workflow.runId);
+		runRecord = args.transport.getWorkflowRunAttempt(receipt.workflow.runId, receipt.workflow.runAttempt);
+		jobRecords = args.transport.listWorkflowRunJobs(receipt.workflow.runId, receipt.workflow.runAttempt);
+		latestRunRecord = args.transport.getWorkflowRun(receipt.workflow.runId);
 	} catch (error) {
 		return { reason: `${label} names run ${receipt.workflow.runId}, which could not be read (transport error code: ${transportCode(error)})` };
 	}
 	const run = workflowRunRecordSchema.safeParse(runRecord);
 	if (!run.success) return { reason: `${label} names run ${receipt.workflow.runId}, which GitHub does not record` };
 	const expectedBranch = args.identity.ref.replace(/^refs\/heads\//u, "");
-	if (run.data.path !== args.identity.workflowPath || run.data.repository.full_name !== args.identity.repository || run.data.head_sha.toLowerCase() !== receipt.sourceSha || run.data.head_branch !== expectedBranch) return { reason: `${label} names run ${receipt.workflow.runId}, whose recorded workflow, repository, head, or branch disagrees with the receipt` };
-	const jobs = z.object({ jobs: z.array(workflowRunJobSchema) }).safeParse(jobRecords);
-	if (!jobs.success) return { reason: `${label} names run ${receipt.workflow.runId}, whose job records are malformed` };
+	if (run.data.id !== Number(receipt.workflow.runId) || run.data.run_attempt !== receipt.workflow.runAttempt || run.data.path !== args.identity.workflowPath || run.data.repository.full_name !== args.identity.repository || run.data.head_sha.toLowerCase() !== receipt.sourceSha || run.data.head_branch !== expectedBranch) return { reason: `${label} names run ${receipt.workflow.runId}, whose recorded run, attempt, workflow, repository, head, or branch disagrees with the receipt` };
+	const latestRun = workflowRunRecordSchema.safeParse(latestRunRecord);
+	if (!latestRun.success || latestRun.data.id !== run.data.id || latestRun.data.run_attempt !== receipt.workflow.runAttempt || latestRun.data.path !== run.data.path || latestRun.data.repository.full_name !== run.data.repository.full_name || latestRun.data.head_sha !== run.data.head_sha || latestRun.data.head_branch !== run.data.head_branch) return { reason: `${label} producing attempt is no longer the current matching run attempt; reconciliation is required` };
+	const jobs = z.object({
+		jobs: z.array(workflowRunJobSchema),
+		total_count: z.number().int().nonnegative()
+	}).safeParse(jobRecords);
+	if (!jobs.success || jobs.data.total_count !== jobs.data.jobs.length) return { reason: `${label} names run ${receipt.workflow.runId}, whose job records are malformed or incomplete` };
 	const stepName = boundReceiptStepName(deployment.id);
-	if (jobs.data.jobs.find((job) => job.conclusion === "success" && job.head_sha.toLowerCase() === receipt.sourceSha && job.steps?.some((step) => step.name === stepName && step.conclusion === "success")) === void 0) return { reason: `${label} names run ${receipt.workflow.runId}, but no succeeded job of that run at ${receipt.sourceSha} bound deployment ${deployment.id}` };
+	if (jobs.data.jobs.find((job) => job.conclusion === "success" && job.run_id === Number(receipt.workflow.runId) && job.run_attempt === receipt.workflow.runAttempt && job.head_sha.toLowerCase() === receipt.sourceSha && job.steps?.some((step) => step.name === stepName && step.conclusion === "success")) === void 0) return { reason: `${label} names run ${receipt.workflow.runId}, but no succeeded job of that run at ${receipt.sourceSha} bound deployment ${deployment.id}` };
 	return {
 		baseline: {
 			deploymentId: deployment.id,
@@ -21109,9 +21121,10 @@ const ghDeploymentReceiptTransport = (cwd, repository, run = defaultGhRunner) =>
 		createDeployment: (body) => post(`${base}/deployments`, body),
 		createDeploymentStatus: (deploymentId, body) => post(`${base}/deployments/${deploymentId}/statuses`, body),
 		getWorkflowRun: (runId) => api(`${base}/actions/runs/${runId}`),
+		getWorkflowRunAttempt: (runId, attempt) => api(`${base}/actions/runs/${runId}/attempts/${attempt}`),
 		listDeploymentStatuses: (deploymentId) => api(`${base}/deployments/${deploymentId}/statuses?per_page=${RECEIPT_PAGE_SIZE}`),
 		listDeployments: () => api(`${base}/deployments?per_page=${RECEIPT_PAGE_SIZE}`),
-		listWorkflowRunJobs: (runId) => api(`${base}/actions/runs/${runId}/jobs?per_page=${RECEIPT_PAGE_SIZE}`)
+		listWorkflowRunJobs: (runId, attempt) => api(`${base}/actions/runs/${runId}/attempts/${attempt}/jobs?per_page=${RECEIPT_PAGE_SIZE}`)
 	};
 };
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patronage/software-factory",
-  "version": "1.0.0-alpha.33",
+  "version": "1.0.0-alpha.34",
   "description": "Shared Patronage software factory CLI and project-profile validation tools",
   "license": "MIT",
   "repository": {
@@ -37,7 +37,7 @@
     "picomatch": "^4.0.5",
     "yaml": "^2.9.0",
     "zod": "4.4.3",
-    "@patronage/factory-ci": "1.0.0-alpha.33"
+    "@patronage/factory-ci": "1.0.0-alpha.34"
   },
   "devDependencies": {
     "@types/node": "24.13.3",