@substrate-ai/sdlc 0.19.54

package/dist/run-model/schemas.js

@@ -0,0 +1,83 @@
+/**
+ * RunManifest Zod schemas — Story 52-1 / Story 52-8.
+ *
+ * Provides runtime validation for the run manifest file.
+ * All schemas mirror the TypeScript interfaces in `types.ts`.
+ */
+import { z } from 'zod';
+import { CliFlagsSchema } from './cli-flags.js';
+import { PerStoryStateSchema } from './per-story-state.js';
+import { RecoveryEntrySchema, CostAccumulationSchema } from './recovery-history.js';
+// Re-export for convenience (Story 52-8)
+export { RecoveryEntrySchema, CostAccumulationSchema } from './recovery-history.js';
+// ---------------------------------------------------------------------------
+// Sub-schemas
+// ---------------------------------------------------------------------------
+/**
+ * Schema for a pending supervisor proposal.
+ * Uses z.union for extensible type field (follows v0.19.6 ReadinessFindingCategory pattern).
+ */
+export const ProposalSchema = z.object({
+    id: z.string(),
+    created_at: z.string(),
+    description: z.string(),
+    type: z.union([
+        z.literal('retry'),
+        z.literal('fix'),
+        z.literal('escalate'),
+        z.literal('skip'),
+        z.string(), // extensible — accepts unknown future types
+    ]),
+    story_key: z.string().optional(),
+    payload: z.record(z.string(), z.unknown()).optional(),
+});
+// ---------------------------------------------------------------------------
+// RunManifestSchema — primary schema
+// ---------------------------------------------------------------------------
+/**
+ * Zod schema for the full run manifest data.
+ * Validated on every read; write validates via JSON round-trip.
+ *
+ * `cost_accumulation` uses `.default({ per_story: {}, run_total: 0 })` so
+ * pre-Phase-D manifests that omit this field parse without error (AC7).
+ */
+export const RunManifestSchema = z.object({
+    run_id: z.string(),
+    // Story 52-3: validate cli_flags with CliFlagsSchema so unknown halt_on values
+    // (e.g. 'severe') are caught at deserialization time (AC7). Unknown keys are
+    // stripped silently (Zod default). Output is cast back to Record<string,unknown>
+    // so RunManifestData.cli_flags type is unchanged for all existing consumers.
+    cli_flags: CliFlagsSchema.transform((v) => v),
+    story_scope: z.array(z.string()),
+    supervisor_pid: z.number().nullable(),
+    supervisor_session_id: z.string().nullable(),
+    per_story_state: z.record(z.string(), PerStoryStateSchema),
+    // Story 52-8: typed RecoveryEntry array (replaces placeholder from 52-1)
+    recovery_history: z.array(RecoveryEntrySchema),
+    // Story 52-8: typed CostAccumulation with .default() for backward compatibility.
+    // Pre-Phase-D manifests that omit cost_accumulation parse without error (AC7).
+    cost_accumulation: CostAccumulationSchema.default({ per_story: {}, run_total: 0 }),
+    pending_proposals: z.array(ProposalSchema),
+    generation: z.number().int().nonnegative(),
+    created_at: z.string(),
+    updated_at: z.string(),
+});
+// ---------------------------------------------------------------------------
+// ManifestReadError
+// ---------------------------------------------------------------------------
+/**
+ * Error thrown when all read sources for a manifest fail.
+ *
+ * Includes `attempted_sources` listing each path/source tried,
+ * so callers can diagnose which files were corrupt or missing.
+ */
+export class ManifestReadError extends Error {
+    /** List of sources (file paths or source names) that were attempted. */
+    attempted_sources;
+    constructor(message, attempted_sources) {
+        super(message);
+        this.name = 'ManifestReadError';
+        this.attempted_sources = attempted_sources;
+    }
+}
+//# sourceMappingURL=schemas.js.map

package/dist/run-model/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/run-model/schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAEnF,yCAAyC;AACzC,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAEnF,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;QACZ,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAClB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAChB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACrB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACjB,CAAC,CAAC,MAAM,EAAE,EAAE,4CAA4C;KACzD,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAA;AAEF,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,+EAA+E;IAC/E,6EAA6E;IAC7E,iFAAiF;IACjF,6EAA6E;IAC7E,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,CAAC,CAAC;IACtE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC;IAC1D,yEAAyE;IACzE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC9C,iFAAiF;IACjF,+EAA+E;IAC/E,iBAAiB,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAClF,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAA;AAEF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,wEAAwE;IAC/D,iBAAiB,CAAU;IAEpC,YAAY,OAAe,EAAE,iBAA2B;QACtD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;QAC/B,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IAC5C,CAAC;CACF"}

package/dist/run-model/supervisor-lock.d.ts

@@ -0,0 +1,104 @@
+/**
+ * SupervisorLock — advisory lock preventing concurrent supervisor attachment.
+ *
+ * Story 52-2: Supervisor Locking and Ownership.
+ *
+ * Primary path: uses atomic exclusive file creation (`O_CREAT | O_EXCL` via
+ * the `'wx'` flag) on `.substrate/runs/{run-id}.lock` to simulate advisory
+ * flock. On filesystems that do not support this (ENOSYS / EOPNOTSUPP), the
+ * implementation automatically degrades to a PID-file at
+ * `.substrate/runs/{run-id}.pid`.
+ *
+ * Error message format (AC3, FR-R3 — must be exact):
+ *   "Run {run-id} is already supervised by PID {pid}. Use --force to take over."
+ */
+import type { ILogger } from '@substrate-ai/core';
+import type { RunManifest } from './run-manifest.js';
+/**
+ * Options for `SupervisorLock.acquire()`.
+ */
+export interface SupervisorLockOptions {
+    /** When true, forcefully evict an existing supervisor (SIGTERM + wait). */
+    force?: boolean;
+}
+/**
+ * Advisory lock for the supervisor process.
+ *
+ * Usage:
+ * ```ts
+ * const lock = new SupervisorLock(runId, manifest)
+ * await lock.acquire(process.pid, sessionId, { force: opts.force })
+ * // ... supervisor work ...
+ * await lock.release()
+ * ```
+ *
+ * The lock is automatically released on process exit if `registerExitHandlers()`
+ * is called, or if the consuming code registers `process.once('exit', ...)`.
+ */
+export declare class SupervisorLock {
+    readonly runId: string;
+    private readonly manifest;
+    private readonly baseDir;
+    private readonly logger;
+    /** Current lock mode — null until `acquire()` succeeds. */
+    private mode;
+    /** File handle held open to maintain the advisory lock (flock mode only). */
+    private lockHandle;
+    constructor(runId: string, manifest: RunManifest, logger?: ILogger);
+    /** Advisory lock file path (primary path). */
+    get lockPath(): string;
+    /** PID-file path (fallback path). */
+    get pidPath(): string;
+    /**
+     * Acquire exclusive ownership of the run.
+     *
+     * Attempts to open `.substrate/runs/{run-id}.lock` with `O_CREAT | O_EXCL`
+     * (the `'wx'` flag), which succeeds atomically only if the file does not
+     * exist. On success, writes `supervisor_pid` and `supervisor_session_id` to
+     * the manifest.
+     *
+     * On EEXIST (file exists → contended): reads the manifest's `supervisor_pid`,
+     * checks if the holder process is alive, and either throws a prescribed
+     * rejection error or evicts the holder (if `force: true`).
+     *
+     * On ENOSYS or EOPNOTSUPP (filesystem does not support exclusive open): logs
+     * a `warn`-level message and falls back to PID-file ownership.
+     *
+     * @throws Error with exact message: "Run {id} is already supervised by PID {pid}. Use --force to take over."
+     */
+    acquire(pid: number, sessionId: string, opts?: SupervisorLockOptions): Promise<void>;
+    /**
+     * Release ownership of the run.
+     *
+     * Removes the lock file (flock mode) or PID-file (fallback mode) and clears
+     * `supervisor_pid` / `supervisor_session_id` in the manifest atomically.
+     *
+     * Safe to call multiple times; subsequent calls are no-ops.
+     */
+    release(): Promise<void>;
+    /**
+     * Acquire ownership using a PID-file at `.substrate/runs/{run-id}.pid`.
+     *
+     * If the PID-file exists:
+     *   - Dead PID (ESRCH from `kill(pid, 0)`) → overwrite without force (AC5)
+     *   - Alive PID without force → throw prescribed rejection error (AC3)
+     *   - Alive PID with force → SIGTERM + wait, then proceed (AC4)
+     */
+    private acquireViaPidFile;
+    private releaseViaPidFile;
+    /**
+     * Send SIGTERM to the existing supervisor and wait up to 500ms for it to exit.
+     *
+     * @throws Error if the process is still alive after 500ms.
+     */
+    private forceKillOwner;
+    /**
+     * Test whether a PID is alive by sending signal 0.
+     *
+     * Returns true if the process exists, false if ESRCH (not found).
+     * Other errors (e.g. EPERM) are treated as "alive" to avoid false stale
+     * detections when we lack permission to signal the process.
+     */
+    private isPidAlive;
+}
+//# sourceMappingURL=supervisor-lock.d.ts.map

package/dist/run-model/supervisor-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-lock.d.ts","sourceRoot":"","sources":["../../src/run-model/supervisor-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AASpD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AASD;;;;;;;;;;;;;GAaG;AACH,qBAAa,cAAc;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAa;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,2DAA2D;IAC3D,OAAO,CAAC,IAAI,CAAwB;IAEpC,6EAA6E;IAC7E,OAAO,CAAC,UAAU,CAA0B;gBAEhC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO;IAYlE,8CAA8C;IAC9C,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,qCAAqC;IACrC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAMD;;;;;;;;;;;;;;;;OAgBG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8F1F;;;;;;;OAOG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B9B;;;;;;;OAOG;YACW,iBAAiB;YA6CjB,iBAAiB;IAQ/B;;;;OAIG;YACW,cAAc;IAmB5B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;CASnB"}

package/dist/run-model/supervisor-lock.js

@@ -0,0 +1,284 @@
+/**
+ * SupervisorLock — advisory lock preventing concurrent supervisor attachment.
+ *
+ * Story 52-2: Supervisor Locking and Ownership.
+ *
+ * Primary path: uses atomic exclusive file creation (`O_CREAT | O_EXCL` via
+ * the `'wx'` flag) on `.substrate/runs/{run-id}.lock` to simulate advisory
+ * flock. On filesystems that do not support this (ENOSYS / EOPNOTSUPP), the
+ * implementation automatically degrades to a PID-file at
+ * `.substrate/runs/{run-id}.pid`.
+ *
+ * Error message format (AC3, FR-R3 — must be exact):
+ *   "Run {run-id} is already supervised by PID {pid}. Use --force to take over."
+ */
+import { mkdir, open, unlink, readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+// Module-level default logger — consumers may inject their own via the constructor.
+const defaultLogger = console;
+// ---------------------------------------------------------------------------
+// SupervisorLock
+// ---------------------------------------------------------------------------
+/**
+ * Advisory lock for the supervisor process.
+ *
+ * Usage:
+ * ```ts
+ * const lock = new SupervisorLock(runId, manifest)
+ * await lock.acquire(process.pid, sessionId, { force: opts.force })
+ * // ... supervisor work ...
+ * await lock.release()
+ * ```
+ *
+ * The lock is automatically released on process exit if `registerExitHandlers()`
+ * is called, or if the consuming code registers `process.once('exit', ...)`.
+ */
+export class SupervisorLock {
+    runId;
+    manifest;
+    baseDir;
+    logger;
+    /** Current lock mode — null until `acquire()` succeeds. */
+    mode = null;
+    /** File handle held open to maintain the advisory lock (flock mode only). */
+    lockHandle = null;
+    constructor(runId, manifest, logger) {
+        this.runId = runId;
+        this.manifest = manifest;
+        // Co-locate lock files with the manifest
+        this.baseDir = manifest.baseDir;
+        this.logger = logger ?? defaultLogger;
+    }
+    // -------------------------------------------------------------------------
+    // Path helpers
+    // -------------------------------------------------------------------------
+    /** Advisory lock file path (primary path). */
+    get lockPath() {
+        return join(this.baseDir, `${this.runId}.lock`);
+    }
+    /** PID-file path (fallback path). */
+    get pidPath() {
+        return join(this.baseDir, `${this.runId}.pid`);
+    }
+    // -------------------------------------------------------------------------
+    // acquire()
+    // -------------------------------------------------------------------------
+    /**
+     * Acquire exclusive ownership of the run.
+     *
+     * Attempts to open `.substrate/runs/{run-id}.lock` with `O_CREAT | O_EXCL`
+     * (the `'wx'` flag), which succeeds atomically only if the file does not
+     * exist. On success, writes `supervisor_pid` and `supervisor_session_id` to
+     * the manifest.
+     *
+     * On EEXIST (file exists → contended): reads the manifest's `supervisor_pid`,
+     * checks if the holder process is alive, and either throws a prescribed
+     * rejection error or evicts the holder (if `force: true`).
+     *
+     * On ENOSYS or EOPNOTSUPP (filesystem does not support exclusive open): logs
+     * a `warn`-level message and falls back to PID-file ownership.
+     *
+     * @throws Error with exact message: "Run {id} is already supervised by PID {pid}. Use --force to take over."
+     */
+    async acquire(pid, sessionId, opts) {
+        const force = opts?.force ?? false;
+        // Ensure the run directory exists
+        await mkdir(this.baseDir, { recursive: true });
+        let fh;
+        try {
+            // 'wx' = O_CREAT | O_EXCL | O_WRONLY — atomic exclusive creation
+            // Succeeds only if the file does not already exist (no wait).
+            fh = await open(this.lockPath, 'wx');
+        }
+        catch (err) {
+            const e = err;
+            if (e.code === 'ENOSYS' || e.code === 'EOPNOTSUPP') {
+                // Filesystem does not support exclusive file creation → PID-file fallback
+                this.logger.warn(`[SupervisorLock] flock not available on this filesystem (${e.code}). ` +
+                    `Falling back to PID-file for run ${this.runId}.`);
+                await this.acquireViaPidFile(pid, sessionId, opts);
+                return;
+            }
+            if (e.code === 'EEXIST') {
+                // Lock file already exists — determine if the holder is alive
+                let existingPid = null;
+                try {
+                    const data = await this.manifest.read();
+                    existingPid = data.supervisor_pid;
+                }
+                catch {
+                    // Manifest unreadable — treat as stale lock
+                }
+                if (existingPid === null) {
+                    // No PID in manifest → stale lock file from a crashed supervisor.
+                    // Remove it and retry acquisition.
+                    await unlink(this.lockPath).catch(() => undefined);
+                    await this.acquire(pid, sessionId, opts);
+                    return;
+                }
+                // Check if the recorded PID is still alive
+                const isAlive = this.isPidAlive(existingPid);
+                if (!isAlive) {
+                    // Stale lock — dead process left the lock file behind
+                    await unlink(this.lockPath).catch(() => undefined);
+                    await this.acquire(pid, sessionId, opts);
+                    return;
+                }
+                // Live holder — force eviction or reject
+                if (force) {
+                    await this.forceKillOwner(existingPid);
+                    await unlink(this.lockPath).catch(() => undefined);
+                    await this.acquire(pid, sessionId, opts);
+                    return;
+                }
+                throw new Error(`Run ${this.runId} is already supervised by PID ${existingPid}. Use --force to take over.`);
+            }
+            // Unknown error — propagate
+            throw err;
+        }
+        // Assign handle and mode before any post-open operations so that release()
+        // can always clean up if manifest.update() throws.
+        this.lockHandle = fh;
+        this.mode = 'flock';
+        try {
+            // Write our PID to the lock file for diagnostics (best-effort)
+            await fh.write(String(pid), 0, 'utf-8');
+            // Record ownership in the manifest
+            await this.manifest.update({ supervisor_pid: pid, supervisor_session_id: sessionId });
+        }
+        catch (postOpenErr) {
+            // Cleanup: close handle and remove the lock file so we don't leave
+            // a stale exclusive file behind on partial failure.
+            try {
+                await fh.close();
+            }
+            catch { /* ignore close error */ }
+            this.lockHandle = null;
+            this.mode = null;
+            await unlink(this.lockPath).catch(() => undefined);
+            throw postOpenErr;
+        }
+    }
+    // -------------------------------------------------------------------------
+    // release()
+    // -------------------------------------------------------------------------
+    /**
+     * Release ownership of the run.
+     *
+     * Removes the lock file (flock mode) or PID-file (fallback mode) and clears
+     * `supervisor_pid` / `supervisor_session_id` in the manifest atomically.
+     *
+     * Safe to call multiple times; subsequent calls are no-ops.
+     */
+    async release() {
+        if (this.mode === 'flock') {
+            // Close the file handle first, then unlink
+            if (this.lockHandle !== null) {
+                try {
+                    await this.lockHandle.close();
+                }
+                catch {
+                    // Best-effort — handle may already be closed
+                }
+                this.lockHandle = null;
+            }
+            await unlink(this.lockPath).catch(() => undefined);
+        }
+        else if (this.mode === 'pid-file') {
+            await this.releaseViaPidFile();
+        }
+        this.mode = null;
+        // Clear ownership fields in the manifest
+        await this.manifest.update({ supervisor_pid: null, supervisor_session_id: null });
+    }
+    // -------------------------------------------------------------------------
+    // Private: PID-file fallback (AC2, AC5)
+    // -------------------------------------------------------------------------
+    /**
+     * Acquire ownership using a PID-file at `.substrate/runs/{run-id}.pid`.
+     *
+     * If the PID-file exists:
+     *   - Dead PID (ESRCH from `kill(pid, 0)`) → overwrite without force (AC5)
+     *   - Alive PID without force → throw prescribed rejection error (AC3)
+     *   - Alive PID with force → SIGTERM + wait, then proceed (AC4)
+     */
+    async acquireViaPidFile(pid, sessionId, opts) {
+        const force = opts?.force ?? false;
+        let existingPid = null;
+        // Attempt to read an existing PID-file
+        try {
+            const content = await readFile(this.pidPath, 'utf-8');
+            const parsed = parseInt(content.trim(), 10);
+            if (!isNaN(parsed)) {
+                existingPid = parsed;
+            }
+        }
+        catch (e) {
+            const err = e;
+            if (err.code !== 'ENOENT') {
+                throw e; // Unexpected error reading PID-file
+            }
+            // ENOENT: no PID-file → proceed to create one
+        }
+        if (existingPid !== null) {
+            const isAlive = this.isPidAlive(existingPid);
+            if (!isAlive) {
+                // AC5: stale PID-file (process crashed) → overwrite silently
+            }
+            else if (force) {
+                // AC4: force takeover — evict the existing supervisor
+                await this.forceKillOwner(existingPid);
+            }
+            else {
+                // AC3: live supervisor, no force → reject
+                throw new Error(`Run ${this.runId} is already supervised by PID ${existingPid}. Use --force to take over.`);
+            }
+        }
+        // Write PID-file atomically (flag 'w' truncates or creates)
+        await writeFile(this.pidPath, String(pid), { flag: 'w' });
+        await this.manifest.update({ supervisor_pid: pid, supervisor_session_id: sessionId });
+        this.mode = 'pid-file';
+    }
+    async releaseViaPidFile() {
+        await unlink(this.pidPath).catch(() => undefined);
+    }
+    // -------------------------------------------------------------------------
+    // Private: force eviction (AC4)
+    // -------------------------------------------------------------------------
+    /**
+     * Send SIGTERM to the existing supervisor and wait up to 500ms for it to exit.
+     *
+     * @throws Error if the process is still alive after 500ms.
+     */
+    async forceKillOwner(existingPid) {
+        process.kill(existingPid, 'SIGTERM');
+        // Brief settle period — give the process time to clean up
+        await new Promise((resolve) => setTimeout(resolve, 500));
+        // Confirm the process has exited
+        const stillAlive = this.isPidAlive(existingPid);
+        if (stillAlive) {
+            throw new Error(`Existing supervisor PID ${existingPid} did not exit after SIGTERM. Kill manually and retry.`);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Private: liveness check
+    // -------------------------------------------------------------------------
+    /**
+     * Test whether a PID is alive by sending signal 0.
+     *
+     * Returns true if the process exists, false if ESRCH (not found).
+     * Other errors (e.g. EPERM) are treated as "alive" to avoid false stale
+     * detections when we lack permission to signal the process.
+     */
+    isPidAlive(pid) {
+        try {
+            process.kill(pid, 0);
+            return true;
+        }
+        catch (e) {
+            const err = e;
+            return err.code !== 'ESRCH';
+        }
+    }
+}
+//# sourceMappingURL=supervisor-lock.js.map

package/dist/run-model/supervisor-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-lock.js","sourceRoot":"","sources":["../../src/run-model/supervisor-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAKhC,oFAAoF;AACpF,MAAM,aAAa,GAAY,OAAO,CAAA;AAiBtC,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,cAAc;IAChB,KAAK,CAAQ;IACL,QAAQ,CAAa;IACrB,OAAO,CAAQ;IACf,MAAM,CAAS;IAEhC,2DAA2D;IACnD,IAAI,GAAoB,IAAI,CAAA;IAEpC,6EAA6E;IACrE,UAAU,GAAsB,IAAI,CAAA;IAE5C,YAAY,KAAa,EAAE,QAAqB,EAAE,MAAgB;QAChE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,yCAAyC;QACzC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,aAAa,CAAA;IACvC,CAAC;IAED,4EAA4E;IAC5E,eAAe;IACf,4EAA4E;IAE5E,8CAA8C;IAC9C,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC,CAAA;IACjD,CAAC;IAED,qCAAqC;IACrC,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC,CAAA;IAChD,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,SAAiB,EAAE,IAA4B;QACxE,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,KAAK,CAAA;QAElC,kCAAkC;QAClC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE9C,IAAI,EAAc,CAAA;QAClB,IAAI,CAAC;YACH,iEAAiE;YACjE,8DAA8D;YAC9D,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA4B,CAAA;YAEtC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACnD,0EAA0E;gBAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4DAA4D,CAAC,CAAC,IAAI,KAAK;oBACrE,oCAAoC,IAAI,CAAC,KAAK,GAAG,CACpD,CAAA;gBACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;gBAClD,OAAM;YACR,CAAC;YAED,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,8DAA8D;gBAC9D,IAAI,WAAW,GAAkB,IAAI,CAAA;gBACrC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;oBACvC,WAAW,GAAG,IAAI,CAAC,cAAc,CAAA;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,4CAA4C;gBAC9C,CAAC;gBAED,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACzB,kEAAkE;oBAClE,mCAAmC;oBACnC,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;oBAClD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;oBACxC,OAAM;gBACR,CAAC;gBAED,2CAA2C;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;gBAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,sDAAsD;oBACtD,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;oBAClD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;oBACxC,OAAM;gBACR,CAAC;gBAED,yCAAyC;gBACzC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;oBACtC,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;oBAClD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;oBACxC,OAAM;gBACR,CAAC;gBAED,MAAM,IAAI,KAAK,CACb,OAAO,IAAI,CAAC,KAAK,iCAAiC,WAAW,6BAA6B,CAC3F,CAAA;YACH,CAAC;YAED,4BAA4B;YAC5B,MAAM,GAAG,CAAA;QACX,CAAC;QAED,2EAA2E;QAC3E,mDAAmD;QACnD,IAAI,CAAC,UAAU,GAAG,EAAE,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAA;QAEnB,IAAI,CAAC;YACH,+DAA+D;YAC/D,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;YACvC,mCAAmC;YACnC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,WAAoB,EAAE,CAAC;YAC9B,mEAAmE;YACnE,oDAAoD;YACpD,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;YAC3D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;YACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;YAChB,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,WAAW,CAAA;QACnB,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,2CAA2C;YAC3C,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,6CAA6C;gBAC/C,CAAC;gBACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;YACxB,CAAC;YACD,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAChC,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAEhB,yCAAyC;QACzC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAA;IACnF,CAAC;IAED,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAE5E;;;;;;;OAOG;IACK,KAAK,CAAC,iBAAiB,CAC7B,GAAW,EACX,SAAiB,EACjB,IAA4B;QAE5B,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,KAAK,CAAA;QAClC,IAAI,WAAW,GAAkB,IAAI,CAAA;QAErC,uCAAuC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;YAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnB,WAAW,GAAG,MAAM,CAAA;YACtB,CAAC;QACH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA0B,CAAA;YACtC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,CAAC,CAAA,CAAC,oCAAoC;YAC9C,CAAC;YACD,8CAA8C;QAChD,CAAC;QAED,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;YAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,6DAA6D;YAC/D,CAAC;iBAAM,IAAI,KAAK,EAAE,CAAC;gBACjB,sDAAsD;gBACtD,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;YACxC,CAAC;iBAAM,CAAC;gBACN,0CAA0C;gBAC1C,MAAM,IAAI,KAAK,CACb,OAAO,IAAI,CAAC,KAAK,iCAAiC,WAAW,6BAA6B,CAC3F,CAAA;YACH,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QACzD,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAA;QACrF,IAAI,CAAC,IAAI,GAAG,UAAU,CAAA;IACxB,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC;IAED,4EAA4E;IAC5E,gCAAgC;IAChC,4EAA4E;IAE5E;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAAC,WAAmB;QAC9C,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAEpC,0DAA0D;QAC1D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;QAE9D,iCAAiC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,2BAA2B,WAAW,uDAAuD,CAC9F,CAAA;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,0BAA0B;IAC1B,4EAA4E;IAE5E;;;;;;OAMG;IACK,UAAU,CAAC,GAAW;QAC5B,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACpB,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA0B,CAAA;YACtC,OAAO,GAAG,CAAC,IAAI,KAAK,OAAO,CAAA;QAC7B,CAAC;IACH,CAAC;CACF"}

package/dist/run-model/types.d.ts

@@ -0,0 +1,74 @@
+/**
+ * RunManifest type definitions — Story 52-1 / Story 52-8.
+ *
+ * Provides TypeScript interfaces for the run manifest file stored at
+ * `.substrate/runs/{run-id}.json`.
+ */
+import type { PerStoryState } from './per-story-state.js';
+import type { RecoveryEntry, CostAccumulation } from './recovery-history.js';
+export type { RecoveryEntry, CostAccumulation };
+/**
+ * A pending supervisor proposal awaiting user confirmation.
+ */
+export interface Proposal {
+    /** Unique proposal ID. */
+    id: string;
+    /** ISO-8601 timestamp when the proposal was created. */
+    created_at: string;
+    /** Short description of what is being proposed. */
+    description: string;
+    /** Proposal type (e.g. 'retry', 'fix', 'escalate'). */
+    type: string;
+    /** Story key this proposal pertains to, if any. */
+    story_key?: string;
+    /** Additional payload data for the proposal. */
+    payload?: Record<string, unknown>;
+}
+/**
+ * Full data shape for a run manifest stored on disk.
+ *
+ * All fields are required; optional values use `null`.
+ * `per_story_state` is typed as `Record<string, PerStoryState>` (story 52-4).
+ * Each key is a story key (e.g., '52-1'); the value tracks full per-story
+ * lifecycle state for manifest consumers across Epics 52–54.
+ */
+export interface RunManifestData {
+    /** Unique run identifier (UUID). */
+    run_id: string;
+    /** CLI flags used to start this run. */
+    cli_flags: Record<string, unknown>;
+    /** Explicit story scope (empty = all pending stories). */
+    story_scope: string[];
+    /**
+     * Pipeline run status. Authoritative source — Dolt `pipeline_runs.status`
+     * is the degraded fallback. Consumers MUST read this field first.
+     */
+    run_status?: 'running' | 'completed' | 'failed' | 'stopped';
+    /**
+     * Number of supervisor-triggered restarts for this run.
+     * Authoritative source — Dolt `run_metrics.restarts` is the degraded fallback.
+     */
+    restart_count?: number;
+    /** PID of the attached supervisor process, or null if none. */
+    supervisor_pid: number | null;
+    /** Session ID of the supervisor process, or null if none. */
+    supervisor_session_id: string | null;
+    /** Per-story state keyed by story key (story 52-4). */
+    per_story_state: Record<string, PerStoryState>;
+    /** Log of recovery attempts for this run (Story 52-8). */
+    recovery_history: RecoveryEntry[];
+    /** Accumulated retry cost data (Story 52-8). */
+    cost_accumulation: CostAccumulation;
+    /** Pending proposals awaiting confirmation. */
+    pending_proposals: Proposal[];
+    /**
+     * Monotonic write counter. Incremented on every successful `write()`.
+     * Used to detect which file is newer after a mid-rename crash.
+     */
+    generation: number;
+    /** ISO-8601 timestamp when the manifest was first created. */
+    created_at: string;
+    /** ISO-8601 timestamp of the most recent write. */
+    updated_at: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/run-model/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/run-model/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAG5E,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAA;AAE/C;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAA;IACnB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,0DAA0D;IAC1D,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;IAC3D;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,6DAA6D;IAC7D,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,uDAAuD;IACvD,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC9C,0DAA0D;IAC1D,gBAAgB,EAAE,aAAa,EAAE,CAAA;IACjC,gDAAgD;IAChD,iBAAiB,EAAE,gBAAgB,CAAA;IACnC,+CAA+C;IAC/C,iBAAiB,EAAE,QAAQ,EAAE,CAAA;IAC7B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAA;IAClB,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAA;CACnB"}

package/dist/run-model/types.js

@@ -0,0 +1,8 @@
+/**
+ * RunManifest type definitions — Story 52-1 / Story 52-8.
+ *
+ * Provides TypeScript interfaces for the run manifest file stored at
+ * `.substrate/runs/{run-id}.json`.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/run-model/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/run-model/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/run-model/verification-result.d.ts

@@ -0,0 +1,60 @@
+/**
+ * StoredVerificationSummary Zod schemas — Story 52-7.
+ *
+ * Defines the typed schemas for persisting VerificationSummary results to the
+ * run manifest's `per_story_state[storyKey].verification_result` field.
+ *
+ * Design notes:
+ * - These schemas mirror the shape of VerificationSummary / VerificationCheckResult
+ *   from packages/sdlc/src/verification/types.ts WITHOUT importing from that module.
+ *   This avoids a circular import between run-model and verification.
+ * - `status` uses `z.enum` (closed set) since verification statuses are fixed at
+ *   `pass|warn|fail` only — distinct from PerStoryStatusSchema which uses the open
+ *   extensible union pattern from v0.19.6.
+ * - All imports use `.js` extensions per monorepo convention.
+ */
+import { z } from 'zod';
+/**
+ * Schema for a single per-check verification result stored in the manifest.
+ *
+ * Mirrors VerificationCheckResult from packages/sdlc/src/verification/types.ts
+ * without importing from that module (avoids circular dependency).
+ */
+export declare const StoredVerificationCheckResultSchema: z.ZodObject<{
+    checkName: z.ZodString;
+    status: z.ZodEnum<{
+        pass: "pass";
+        warn: "warn";
+        fail: "fail";
+    }>;
+    details: z.ZodString;
+    duration_ms: z.ZodNumber;
+}, z.core.$strip>;
+export type StoredVerificationCheckResult = z.infer<typeof StoredVerificationCheckResultSchema>;
+/**
+ * Schema for the aggregated verification pipeline summary stored in the manifest.
+ *
+ * Mirrors VerificationSummary from packages/sdlc/src/verification/types.ts
+ * without importing from that module (avoids circular dependency).
+ */
+export declare const StoredVerificationSummarySchema: z.ZodObject<{
+    storyKey: z.ZodString;
+    checks: z.ZodArray<z.ZodObject<{
+        checkName: z.ZodString;
+        status: z.ZodEnum<{
+            pass: "pass";
+            warn: "warn";
+            fail: "fail";
+        }>;
+        details: z.ZodString;
+        duration_ms: z.ZodNumber;
+    }, z.core.$strip>>;
+    status: z.ZodEnum<{
+        pass: "pass";
+        warn: "warn";
+        fail: "fail";
+    }>;
+    duration_ms: z.ZodNumber;
+}, z.core.$strip>;
+export type StoredVerificationSummary = z.infer<typeof StoredVerificationSummarySchema>;
+//# sourceMappingURL=verification-result.d.ts.map

package/dist/run-model/verification-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-result.d.ts","sourceRoot":"","sources":["../../src/run-model/verification-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;iBAS9C,CAAA;AAEF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAA;AAM/F;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;iBAS1C,CAAA;AAEF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAA"}