substrate-ai 0.20.138 → 0.20.141

package/dist/src/modules/decision-router/index.d.ts

@@ -21,7 +21,7 @@ type Severity = 'info' | 'warning' | 'critical' | 'fatal';
  * All known halt-able decision types (AC1).
  * Epic 73 (Recovery Engine) will extend this union with additional types.
  */
-type DecisionType = 'cost-ceiling-exhausted' | 'build-verification-failure' | 'recovery-retry-attempt' | 're-scope-proposal' | 'scope-violation' | 'cross-story-race-recovered' | 'cross-story-race-still-failed' | 'pipeline-escalation';
+type DecisionType = 'cost-ceiling-exhausted' | 'build-verification-failure' | 'recovery-retry-attempt' | 're-scope-proposal' | 'scope-violation' | 'cross-story-race-recovered' | 'cross-story-race-still-failed' | 'pipeline-escalation' | 'auth-failure';
 /**
  * Maps each known decision type to its severity level.
  *

package/dist/src/modules/decision-router/index.js

@@ -1,3 +1,3 @@
-import { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision } from "../../../decision-router-DblHY8se.js";
+import { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision } from "../../../decision-router-BAPpON_C.js";
 
 export { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision };

package/dist/src/modules/recovery-engine/index.d.ts

@@ -1,4 +1,4 @@
-import { CoreEvents, DatabaseAdapter, TypedEventBus } from "../../../index-BJEANS9i.js";
+import { CoreEvents, DatabaseAdapter, TypedEventBus } from "../../../index-BqVBOAO0.js";
 import { z } from "zod";
 
 //#region packages/sdlc/dist/verification/findings.d.ts
@@ -581,9 +581,17 @@ declare const PerStoryStateSchema: z.ZodObject<{
   escalation_reason: z.ZodOptional<z.ZodString>;
   escalation_detail: z.ZodOptional<z.ZodString>;
   commit_sha: z.ZodOptional<z.ZodString>;
+  baseline_sha: z.ZodOptional<z.ZodString>;
+  checkpoint_sha: z.ZodOptional<z.ZodString>;
   story_file: z.ZodOptional<z.ZodString>;
   story_file_input_path: z.ZodOptional<z.ZodString>;
   story_file_sha256: z.ZodOptional<z.ZodString>;
+  verdict: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"SHIP_IT">, z.ZodLiteral<"LGTM_WITH_NOTES">, z.ZodLiteral<"NEEDS_MINOR_FIXES">, z.ZodLiteral<"NEEDS_MAJOR_REWORK">, z.ZodString]>>;
+  total_turns: z.ZodOptional<z.ZodNumber>;
+  total_tokens: z.ZodOptional<z.ZodObject<{
+    input: z.ZodNumber;
+    output: z.ZodNumber;
+  }, z.core.$strip>>;
 }, z.core.$strip>;
 type PerStoryState = z.infer<typeof PerStoryStateSchema>;
 

package/dist/{upgrade-CnIsoLpT.js → upgrade-CTj4hi8J.js}

@@ -1,5 +1,5 @@
-import "./dist-DnvGvKLu.js";
+import "./dist-DiNK6QOD.js";
 import "./version-manager-impl-qFBiO4Eh.js";
-import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-yULZIAAW.js";
+import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-DB7KzD9c.js";
 
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };

package/dist/{upgrade-yULZIAAW.js → upgrade-DB7KzD9c.js}

@@ -1,4 +1,4 @@
-import { createVersionManager } from "./dist-DnvGvKLu.js";
+import { createVersionManager } from "./dist-DiNK6QOD.js";
 import { execSync, spawn } from "child_process";
 import * as readline from "readline";
 
@@ -123,4 +123,4 @@ function registerUpgradeCommand(program) {
 
 //#endregion
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };
-//# sourceMappingURL=upgrade-yULZIAAW.js.map
+//# sourceMappingURL=upgrade-DB7KzD9c.js.map

package/dist/{version-manager-impl-C7ZhqLX3.js → version-manager-impl-HJMonRJi.js}

@@ -1,4 +1,4 @@
-import { VersionManagerImpl, createVersionManager } from "./dist-DnvGvKLu.js";
+import { VersionManagerImpl, createVersionManager } from "./dist-DiNK6QOD.js";
 import "./version-manager-impl-qFBiO4Eh.js";
 
 export { createVersionManager };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.20.138",
+  "version": "0.20.141",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",
@@ -53,7 +53,7 @@
     "check:circular": "dpdm --no-warning --exit-code circular:1 packages/core/src/index.ts packages/sdlc/src/index.ts packages/factory/src/index.ts",
     "dev": "tsx watch src/cli/index.ts",
     "test": "vitest run --coverage",
-    "test:fast": "vitest run --exclude 'src/__tests__/e2e/**' --exclude '**/*integration*' --exclude '**/*e2e*'",
+    "test:fast": "vitest run --exclude 'src/__tests__/e2e/**' --exclude 'src/**/*integration*' --exclude 'packages/**/*integration*' --exclude '**/*e2e*'",
     "test:changed": "vitest run --changed",
     "test:watch": "vitest",
     "test:ui": "vitest --ui",
@@ -104,4 +104,4 @@
     "typescript-eslint": "^8.18.0",
     "vitest": "^2.1.8"
   }
-}
+}

package/packs/bmad/prompts/probe-author.md

@@ -82,6 +82,23 @@ Exit-code success is necessary but **not sufficient** for probes calling tools t
 
 Patterns are JavaScript regex (`new RegExp`). Evaluated only when exit code is 0; non-zero exits emit `runtime-probe-fail` and assertions are skipped to avoid redundant findings.
 
+## Anchor test-runner assertions to the runner's summary line
+
+When a probe asserts a test suite passed, patterns MUST anchor to the test runner's own summary line — never a bare substring that can appear in test/fixture log output. A passing suite's stdout legitimately contains words like `failed`, `error`, `FAIL` inside fixture data, negative-path test logs, and the code under test's own messages.
+
+Substrate Run d21e26a8 (Stories 81-9/81-11, 2026-06-07): a probe forbade `\d+ failed` on `npm run test:fast` output. The suite was 100% green (10152/10152), but an orchestrator test's own log line `Story 29-9 failed: ...` matched the pattern — false-positive probe failure on both stories, AND both dev agents then **edited production log wording to dodge the regex** (a probe-induced production perturbation that had to be reverted in review).
+
+**Rule**: for vitest, assert the summary lines, not bare keywords:
+
+```yaml
+  expect_stdout_regex:
+    - 'Test Files\s+\d+ passed'        # anchored to vitest's summary
+  expect_stdout_no_regex:
+    - 'Tests.*\d+ failed'              # anchored: only matches the summary line
+```
+
+**DO NOT use**: bare `\d+ failed`, `error`, `FAIL` — these match fixture logs on green suites. The same anchoring discipline applies to any runner (jest, pytest, go test): find the runner's machine-stable summary format and pin to it.
+
 ## Probes for event-driven mechanisms must invoke the production trigger
 
 When the source AC describes a hook, timer, signal, webhook, or other event-driven mechanism, the probe MUST invoke the **production trigger** that fires the implementation in real usage — NOT call the implementation script directly. Calling the implementation directly verifies it produces correct outputs given synthetic inputs; it does NOT verify the implementation is wired to the right trigger and will actually fire when the AC's user-facing event occurs.

package/dist/adapter-registry-Bpa7ESBV.js

@@ -1,4 +0,0 @@
-import { AdapterRegistry } from "./dist-DnvGvKLu.js";
-import "./adapter-registry-DIcrxjH8.js";
-
-export { AdapterRegistry };