substrate-ai 0.20.139 → 0.20.142

package/dist/adapter-registry-qU0IkbbQ.js

@@ -0,0 +1,4 @@
+import { AdapterRegistry } from "./dist-DiNK6QOD.js";
+import "./adapter-registry-DIcrxjH8.js";
+
+export { AdapterRegistry };

package/dist/cli/index.js

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-BXVyiLiL.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-DTJaiJOd.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
-import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-BWCudDcl.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createGitWorktreeManager, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-eaZG_3rN.js";
+import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-DiNK6QOD.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createGitWorktreeManager, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-DHHryElL.js";
 import "../adapter-registry-DIcrxjH8.js";
-import { RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-IvpNQ6Yy.js";
-import "../errors-rZ-lz8U0.js";
+import { RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-BgZ6mR5R.js";
+import "../errors-B21JUhcc.js";
 import "../routing-DFxoKHDt.js";
 import { WorkGraphRepository } from "../work-graph-repository-DZyJv5pV.js";
 import "../decisions-CzSIEeGP.js";
-import "../decision-router-DblHY8se.js";
-import "../interactive-prompt-BypNgFHL.js";
+import "../decision-router-BAPpON_C.js";
+import "../interactive-prompt-OMlqP7Lm.js";
 import "../recovery-engine-BKGBeBnW.js";
 import "../version-manager-impl-qFBiO4Eh.js";
-import { registerUpgradeCommand } from "../upgrade-3NTcs1t7.js";
+import { registerUpgradeCommand } from "../upgrade-DB7KzD9c.js";
 import { Command } from "commander";
 import { fileURLToPath } from "url";
 import { dirname, join, resolve } from "path";
@@ -670,6 +670,7 @@ const WHOLESALE_SUBSTRATE_IGNORES = new Set([
 ]);
 const STAR = ".substrate/*";
 const CONFIG_NEGATION = "!.substrate/config.yaml";
+const PROFILE_NEGATION = "!.substrate/project-profile.yaml";
 const CODEX_PROMPTS = ".codex/prompts/";
 const CODEX_SKILLS = ".codex/skills/";
 /**
@@ -685,6 +686,9 @@ function computeSubstrateGitignore(existing) {
 	const negIdx = trimmed.lastIndexOf(CONFIG_NEGATION);
 	const negationEffective = negIdx !== -1 && negIdx > starIdx;
 	if (!negationEffective) append.push(CONFIG_NEGATION);
+	const profileNegIdx = trimmed.lastIndexOf(PROFILE_NEGATION);
+	const profileNegationEffective = profileNegIdx !== -1 && profileNegIdx > starIdx;
+	if (!profileNegationEffective) append.push(PROFILE_NEGATION);
 	if (!trimmed.includes(CODEX_PROMPTS)) append.push(CODEX_PROMPTS);
 	if (!trimmed.includes(CODEX_SKILLS)) append.push(CODEX_SKILLS);
 	let content = lines.join("\n");
@@ -925,6 +929,18 @@ async function detectSingleProjectStack(dir) {
 			break;
 		}
 		if (marker.file === "pyproject.toml") {
+			const hasUv = await fileExists(path$1.join(dir, "uv.lock"));
+			if (hasUv) {
+				baseEntry = {
+					path: dir,
+					language: "python",
+					buildTool: "uv",
+					buildCommand: "uv sync",
+					testCommand: "uv run pytest",
+					installCommand: "uv add <package>"
+				};
+				break;
+			}
 			const hasPoetry = await fileExists(path$1.join(dir, "poetry.lock"));
 			if (hasPoetry) {
 				baseEntry = {
@@ -7036,7 +7052,7 @@ async function runStatusAction(options) {
 			logger$15.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-D27XuFLF.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-Cf5RjwHi.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -7984,7 +8000,7 @@ function defaultSupervisorDeps() {
 				if (cached === null) {
 					const { AdapterRegistry: AR } = await import(
 						/* @vite-ignore */
-						"../adapter-registry-CXIG-OQI.js"
+						"../adapter-registry-qU0IkbbQ.js"
 );
 					cached = new AR();
 					await cached.discoverAndRegister();
@@ -8551,11 +8567,11 @@ async function runSupervisorAction(options, deps = {}) {
 						try {
 							const { createExperimenter } = await import(
 								/* @vite-ignore */
-								"../experimenter-Dn0gGOYl.js"
+								"../experimenter-D55L011w.js"
 );
 							const { getLatestRun: getLatest } = await import(
 								/* @vite-ignore */
-								"../decisions-EQtHqewP.js"
+								"../decisions-Dvw5HhyM.js"
 );
 							const expAdapter = createDatabaseAdapter({
 								backend: "auto",
@@ -8565,7 +8581,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-Cp19x4Xv.js"
+									"../run-DStT56J1.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -9090,7 +9106,7 @@ async function runMetricsAction(options) {
 			const routingConfigPath = join(dbDir, "routing.yml");
 			let routingConfig = null;
 			if (existsSync$1(routingConfigPath)) try {
-				const { loadModelRoutingConfig } = await import("../routing-C0f2cYja.js");
+				const { loadModelRoutingConfig } = await import("../routing-_PGfe_cD.js");
 				routingConfig = loadModelRoutingConfig(routingConfigPath);
 			} catch {}
 			if (routingConfig === null) routingConfig = {
@@ -10505,7 +10521,7 @@ async function listWorktreesAction(options) {
 * @returns       - Exit code (0 = success, 1 = error)
 */
 async function cleanupWorktreesAction(options) {
-	const { taskId, projectRoot } = options;
+	const { taskId, projectRoot, force } = options;
 	try {
 		const eventBus = createEventBus();
 		const manager = createGitWorktreeManager({
@@ -10513,7 +10529,7 @@ async function cleanupWorktreesAction(options) {
 			projectRoot
 		});
 		if (taskId !== void 0) try {
-			await manager.cleanupWorktree(taskId);
+			await manager.cleanupWorktree(taskId, { force: force === true });
 			process.stdout.write(`Cleaned up worktree for task "${taskId}"\n`);
 			return WORKTREES_EXIT_SUCCESS;
 		} catch (err) {
@@ -10526,8 +10542,9 @@ async function cleanupWorktreesAction(options) {
 			return WORKTREES_EXIT_ERROR;
 		}
 		try {
-			const cleaned = await manager.cleanupAllWorktrees();
+			const cleaned = await manager.cleanupAllWorktrees({ force: force === true });
 			process.stdout.write(`Cleaned up ${cleaned} worktree${cleaned === 1 ? "" : "s"}\n`);
+			if (force !== true) process.stdout.write("Worktrees with uncommitted work or unmerged branch commits were preserved — re-run with --force to discard them.\n");
 			return WORKTREES_EXIT_SUCCESS;
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
@@ -10550,12 +10567,13 @@ async function cleanupWorktreesAction(options) {
 * @param projectRoot - Project root directory (defaults to process.cwd())
 */
 function registerWorktreesCommand(program, version = "0.0.0", projectRoot = process.cwd()) {
-	program.command("worktrees").description("List or clean up substrate git worktrees and their task branches").option("--output-format <format>", "Output format: table (default) or json", "table").option("--json", "Output JSON (shorthand for --output-format json)", false).option("--status <status>", `Filter by task status: ${VALID_STATUSES.join(", ")}`).option("--sort <key>", `Sort by: ${VALID_SORT_KEYS.join(", ")} (default: created)`, "created").option("--cleanup [task-id]", "Remove substrate worktree(s) and branches. Pass a task id to remove just one; omit the arg to remove all.").action(async (opts) => {
+	program.command("worktrees").description("List or clean up substrate git worktrees and their task branches").option("--output-format <format>", "Output format: table (default) or json", "table").option("--json", "Output JSON (shorthand for --output-format json)", false).option("--status <status>", `Filter by task status: ${VALID_STATUSES.join(", ")}`).option("--sort <key>", `Sort by: ${VALID_SORT_KEYS.join(", ")} (default: created)`, "created").option("--cleanup [task-id]", "Remove substrate worktree(s) and branches. Pass a task id to remove just one; omit the arg to remove all.").option("--force", "Discard worktrees even when they hold uncommitted work or unmerged branch commits.", false).action(async (opts) => {
 		if (opts.cleanup !== void 0 && opts.cleanup !== false) {
 			const taskId = typeof opts.cleanup === "string" && opts.cleanup.trim().length > 0 ? opts.cleanup.trim() : void 0;
 			const cleanupExitCode = await cleanupWorktreesAction({
 				...taskId !== void 0 ? { taskId } : {},
-				projectRoot
+				projectRoot,
+				force: opts.force
 			});
 			process.exitCode = cleanupExitCode;
 			return;
@@ -13402,8 +13420,8 @@ async function createProgram() {
 /** Fire-and-forget startup version check (story 8.3, AC3/AC5) */
 function checkForUpdatesInBackground(currentVersion) {
 	if (process.env.SUBSTRATE_NO_UPDATE_CHECK === "1") return;
-	import("../upgrade-DHHSy4fQ.js").then(async () => {
-		const { createVersionManager } = await import("../version-manager-impl-CfzcfFwo.js");
+	import("../upgrade-CTj4hi8J.js").then(async () => {
+		const { createVersionManager } = await import("../version-manager-impl-HJMonRJi.js");
 		const vm = createVersionManager();
 		const result = await vm.checkForUpdates();
 		if (result.updateAvailable) {

package/dist/{decision-router-DblHY8se.js → decision-router-BAPpON_C.js}

@@ -15,6 +15,7 @@ const DECISION_SEVERITY_MAP = {
 	"scope-violation": "fatal",
 	"cross-story-race-recovered": "info",
 	"cross-story-race-still-failed": "critical",
+	"auth-failure": "fatal",
 	"pipeline-escalation": "warning"
 };
 /**
@@ -29,7 +30,8 @@ const DEFAULT_ACTION_MAP = {
 	"scope-violation": "abort-pipeline",
 	"cross-story-race-recovered": "continue-autonomous",
 	"cross-story-race-still-failed": "escalate-without-halt",
-	"pipeline-escalation": "escalate-without-halt"
+	"pipeline-escalation": "escalate-without-halt",
+	"auth-failure": "abort-pipeline"
 };
 /** Fallback default action for unknown decision types. */
 const DEFAULT_DEFAULT_ACTION = "escalate-without-halt";
@@ -94,4 +96,4 @@ function deriveExitCode(outcome) {
 
 //#endregion
 export { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision };
-//# sourceMappingURL=decision-router-DblHY8se.js.map
+//# sourceMappingURL=decision-router-BAPpON_C.js.map

package/dist/{decisions-EQtHqewP.js → decisions-Dvw5HhyM.js}

@@ -1,4 +1,4 @@
-import { addTokenUsage, createDecision, createPipelineRun, createRequirement, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunningPipelineRuns, getTokenUsageSummary, listRequirements, registerArtifact, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision } from "./dist-BWCudDcl.js";
+import { addTokenUsage, createDecision, createPipelineRun, createRequirement, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunningPipelineRuns, getTokenUsageSummary, listRequirements, registerArtifact, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision } from "./dist-DiNK6QOD.js";
 import "./decisions-CzSIEeGP.js";
 
 export { getLatestRun };

package/dist/{dist-BWCudDcl.js → dist-DiNK6QOD.js}

@@ -9462,6 +9462,39 @@ function checkAdapterVersionCompat(adapterName, actualVersion, tested) {
 const execAsync$2 = promisify(exec);
 /** Default model used when none is specified */
 const DEFAULT_MODEL$1 = "claude-sonnet-4-6";
+/**
+* Signatures the Claude Code CLI emits when a dispatch dies on authentication
+* rather than doing any work (H0.4, field finding #10). Matched
+* case-insensitively against the dispatch's combined output.
+*
+* Field-verified: a stale `ANTHROPIC_API_KEY` in the operator's shell made
+* spawned CLIs reject with "auth source takes precedence over claude.ai
+* login · Invalid API key" — surfaced as `create-story-no-file`
+* (qualityScore 40) or a full 600s timeout, never as an auth error, burning
+* ~25 minutes and two runs before diagnosis.
+*/
+const CLAUDE_AUTH_FAILURE_SIGNATURES = [
+	"invalid api key",
+	"auth source takes precedence",
+	"please run /login",
+	"oauth token has expired",
+	"oauth token is invalid",
+	"oauth token revoked",
+	"authentication_error",
+	"credit balance is too low"
+];
+/** Operator-facing remediation appended to auth-failure escalations. */
+const CLAUDE_AUTH_FAILURE_HINT = "The Claude CLI rejected authentication before doing any work. Every subsequent dispatch in this run would fail identically, so the run was halted. Likely causes, in order: (1) a stale ANTHROPIC_API_KEY exported in the environment that spawned substrate — the CLI prefers it over claude.ai subscription login and rejects it if invalid (substrate scrubs the var on coding dispatches, but keys configured inside Claude Code settings/apiKeyHelper are outside substrate's control; verify with `env -u ANTHROPIC_API_KEY claude -p \"ok\"`); (2) an expired claude.ai session — run `claude login`; (3) an exhausted API credit balance when api_billing is enabled. Fix the credential, then re-run — completed stories are preserved.";
+/**
+* Returns the matched auth-failure signature if `output` shows the Claude CLI
+* dying on authentication, else null. Pure + exported for diagnostics and
+* testing (mirrors detectCodexSandboxBlock).
+*/
+function detectClaudeAuthFailure(output) {
+	if (output === void 0 || output === null || output === "") return null;
+	const lower = output.toLowerCase();
+	return CLAUDE_AUTH_FAILURE_SIGNATURES.find((sig) => lower.includes(sig)) ?? null;
+}
 /** Approximate characters per token for estimation */
 const CHARS_PER_TOKEN$2 = 3;
 /** Estimated output token multiplier relative to input */
@@ -9655,10 +9688,13 @@ var ClaudeCodeAdapter = class ClaudeCodeAdapter {
 		if (options.additionalFlags && options.additionalFlags.length > 0) args.push(...options.additionalFlags);
 		const envEntries = {};
 		if (options.billingMode === "api" && options.apiKey) envEntries.ANTHROPIC_API_KEY = options.apiKey;
+		const unsetEnvKeys = ["CLAUDECODE"];
+		if (options.billingMode !== "api") unsetEnvKeys.push("ANTHROPIC_API_KEY");
 		return {
 			binary: "claude",
 			args,
 			env: envEntries,
+			unsetEnvKeys,
 			cwd: options.worktreePath,
 			stdin: planningPrompt
 		};
@@ -11483,5 +11519,5 @@ async function callLLM(params) {
 }
 
 //#endregion
-export { ADVISORY_NOTES, AdapterRegistry, AdtError, BudgetConfigSchema, CODEX_SANDBOX_BLOCK_HINT, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, Categorizer, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, ConsumerAnalyzer, CostTrackerConfigSchema, DEFAULT_CONFIG, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, DoltNotInstalled, DoltQueryError, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, GeminiCLIAdapter, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, LEARNING_FINDING, LogTurnAnalyzer, ModelRoutingConfigSchema, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProviderPolicySchema, ProvidersSchema, Recommender, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TASK_TYPE_PHASE_MAP, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryConfigSchema, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, VersionManagerImpl, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, callLLM, checkDoltInstalled, classifyVersionGap, compareRunMetrics, createAmendmentRun, createConfigSystem, createDatabaseAdapter as createDatabaseAdapter$1, createDecision, createExperimenter, createPipelineRun, createRequirement, createStderrLogger, createVersionManager, detectCodexSandboxBlock, detectInterfaceChanges, determineVerdict, getActiveDecisions, getAllCostEntriesFiltered, getArtifactByTypeForRun, getArtifactsByRun, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getModelTier, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRequirements, listRunMetrics, loadModelRoutingConfig, loadParentRunDecisions, registerArtifact, resolvePromptFile, supersedeDecision, swallowDebug, tagRunAsBaseline, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics };
-//# sourceMappingURL=dist-BWCudDcl.js.map
+export { ADVISORY_NOTES, AdapterRegistry, AdtError, BudgetConfigSchema, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, Categorizer, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, ConsumerAnalyzer, CostTrackerConfigSchema, DEFAULT_CONFIG, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, DoltNotInstalled, DoltQueryError, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, GeminiCLIAdapter, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, LEARNING_FINDING, LogTurnAnalyzer, ModelRoutingConfigSchema, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProviderPolicySchema, ProvidersSchema, Recommender, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TASK_TYPE_PHASE_MAP, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryConfigSchema, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, VersionManagerImpl, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, callLLM, checkDoltInstalled, classifyVersionGap, compareRunMetrics, createAmendmentRun, createConfigSystem, createDatabaseAdapter as createDatabaseAdapter$1, createDecision, createExperimenter, createPipelineRun, createRequirement, createStderrLogger, createVersionManager, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, determineVerdict, getActiveDecisions, getAllCostEntriesFiltered, getArtifactByTypeForRun, getArtifactsByRun, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getModelTier, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRequirements, listRunMetrics, loadModelRoutingConfig, loadParentRunDecisions, registerArtifact, resolvePromptFile, supersedeDecision, swallowDebug, tagRunAsBaseline, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics };
+//# sourceMappingURL=dist-DiNK6QOD.js.map

package/dist/{errors-rZ-lz8U0.js → errors-B21JUhcc.js}

@@ -1,4 +1,4 @@
-import { AdtError } from "./dist-BWCudDcl.js";
+import { AdtError } from "./dist-DiNK6QOD.js";
 
 //#region src/core/errors.ts
 /** Error thrown when task configuration is invalid */
@@ -71,4 +71,4 @@ var TaskGraphIncompatibleFormatError = class extends AdtError {
 
 //#endregion
 export { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError };
-//# sourceMappingURL=errors-rZ-lz8U0.js.map
+//# sourceMappingURL=errors-B21JUhcc.js.map

package/dist/{experimenter-Dn0gGOYl.js → experimenter-D55L011w.js}

@@ -1,3 +1,3 @@
-import { buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, createExperimenter, determineVerdict, resolvePromptFile } from "./dist-BWCudDcl.js";
+import { buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, createExperimenter, determineVerdict, resolvePromptFile } from "./dist-DiNK6QOD.js";
 
 export { createExperimenter };

package/dist/{health-D27XuFLF.js → health-Cf5RjwHi.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-BXVyiLiL.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-DTJaiJOd.js";
 import "./logger-KeHncl-f.js";
-import "./dist-BWCudDcl.js";
-import "./manifest-read-IvpNQ6Yy.js";
+import "./dist-DiNK6QOD.js";
+import "./manifest-read-BgZ6mR5R.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 

package/dist/{health-BXVyiLiL.js → health-DTJaiJOd.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-BWCudDcl.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-IvpNQ6Yy.js";
+import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-DiNK6QOD.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-BgZ6mR5R.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-BXVyiLiL.js.map
+//# sourceMappingURL=health-DTJaiJOd.js.map

package/dist/index.js

@@ -1,8 +1,8 @@
 import { childLogger, createLogger, logger } from "./logger-KeHncl-f.js";
 import { assertDefined, createEventBus, createTuiApp, deepClone, formatDuration, generateId, isPlainObject, isTuiCapable, printNonTtyWarning, sleep, withRetry } from "./helpers-CElYrONe.js";
-import { AdapterRegistry, AdtError, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, GeminiCLIAdapter } from "./dist-BWCudDcl.js";
+import { AdapterRegistry, AdtError, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, GeminiCLIAdapter } from "./dist-DiNK6QOD.js";
 import "./adapter-registry-DIcrxjH8.js";
-import { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError } from "./errors-rZ-lz8U0.js";
+import { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError } from "./errors-B21JUhcc.js";
 
 //#region src/core/di.ts
 /**

package/dist/{interactive-prompt-BypNgFHL.js → interactive-prompt-OMlqP7Lm.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-IvpNQ6Yy.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-BgZ6mR5R.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-BypNgFHL.js.map
+//# sourceMappingURL=interactive-prompt-OMlqP7Lm.js.map

package/dist/{manifest-read-IvpNQ6Yy.js → manifest-read-BgZ6mR5R.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-BWCudDcl.js";
+import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-DiNK6QOD.js";
 import * as path$1 from "path";
 import { join } from "path";
 import { readFile } from "fs/promises";
@@ -2043,11 +2043,11 @@ function findCodeEvidence(opts) {
 /** Hard timeout for the build command in milliseconds (FR-V11). */
 const BUILD_CHECK_TIMEOUT_MS = 6e4;
 /** Maximum characters to include in details string from build output. */
-const MAX_OUTPUT_CHARS = 2e3;
+const MAX_OUTPUT_CHARS$1 = 2e3;
 /** Per-stream tail size cap for structured findings (story 55-1 convention). */
 const TAIL_BYTES = 4 * 1024;
 /** Return the last N bytes of a UTF-8 string, sliced by string length for simplicity. */
-function tail$1(text, bytes = TAIL_BYTES) {
+function tail$2(text, bytes = TAIL_BYTES) {
 	return text.length <= bytes ? text : text.slice(text.length - bytes);
 }
 /**
@@ -2061,11 +2061,9 @@ function tail$1(text, bytes = TAIL_BYTES) {
 * This function inlines the detection logic independently.
 */
 function detectBuildCommand(workingDir) {
+	const profileCommand = readProfileBuildCommand(workingDir);
+	if (profileCommand !== void 0) return profileCommand;
 	if (existsSync(join$1(workingDir, "turbo.json"))) return "turbo build";
-	if (existsSync(join$1(workingDir, "pnpm-lock.yaml"))) return "pnpm run build";
-	if (existsSync(join$1(workingDir, "yarn.lock"))) return "yarn build";
-	if (existsSync(join$1(workingDir, "bun.lockb"))) return "bun run build";
-	if (existsSync(join$1(workingDir, "package.json"))) return "npm run build";
 	const nonNodeMarkers = [
 		"pyproject.toml",
 		"poetry.lock",
@@ -2074,9 +2072,29 @@ function detectBuildCommand(workingDir) {
 		"go.mod"
 	];
 	for (const marker of nonNodeMarkers) if (existsSync(join$1(workingDir, marker))) return "";
+	if (existsSync(join$1(workingDir, "pnpm-lock.yaml"))) return "pnpm run build";
+	if (existsSync(join$1(workingDir, "yarn.lock"))) return "yarn build";
+	if (existsSync(join$1(workingDir, "bun.lockb"))) return "bun run build";
+	if (existsSync(join$1(workingDir, "package.json"))) return "npm run build";
 	return "";
 }
 /**
+* Read `project.buildCommand` from `.substrate/project-profile.yaml` under
+* `workingDir`. Line-based parse (same approach as the monolith's
+* resolveInstallCommand) to avoid a yaml dependency. Returns undefined when
+* the profile is absent, unreadable, or has no buildCommand.
+*/
+function readProfileBuildCommand(workingDir) {
+	const profilePath = join$1(workingDir, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return void 0;
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const match = content.match(/^\s*buildCommand:\s*['"]?(.+?)['"]?\s*$/m);
+		if (match?.[1] !== void 0 && match[1].length > 0) return match[1];
+	} catch {}
+	return void 0;
+}
+/**
 * Runs the project's build command and returns pass/warn/fail based on exit code.
 *
 * AC1: exit code 0 → pass
@@ -2139,8 +2157,8 @@ var BuildCheck = class {
 					severity: "error",
 					message: `command exceeded ${BUILD_CHECK_TIMEOUT_MS}ms`,
 					command: cmd,
-					stdoutTail: tail$1(stdout),
-					stderrTail: tail$1(stderr),
+					stdoutTail: tail$2(stdout),
+					stderrTail: tail$2(stderr),
 					durationMs: duration
 				}];
 				resolve$2({
@@ -2160,13 +2178,169 @@ var BuildCheck = class {
 					findings: []
 				});
 				else {
-					const truncated = output.length > MAX_OUTPUT_CHARS ? output.slice(0, MAX_OUTPUT_CHARS) + "... (truncated)" : output;
+					const truncated = output.length > MAX_OUTPUT_CHARS$1 ? output.slice(0, MAX_OUTPUT_CHARS$1) + "... (truncated)" : output;
 					const findings = [{
 						category: "build-error",
 						severity: "error",
 						message: `build failed (exit ${code}): ${truncated}`,
 						command: cmd,
 						...code !== null ? { exitCode: code } : {},
+						stdoutTail: tail$2(stdout),
+						stderrTail: tail$2(stderr),
+						durationMs: duration
+					}];
+					resolve$2({
+						status: "fail",
+						details: renderFindings(findings),
+						duration_ms: duration,
+						findings
+					});
+				}
+			});
+		});
+	}
+};
+
+//#endregion
+//#region packages/sdlc/dist/verification/checks/test-suite-check.js
+/** Hard ceiling for the suite run (ms). Suites are slower than builds. */
+const TEST_SUITE_CHECK_TIMEOUT_MS = 3e5;
+/** Cap on captured output embedded in the finding. */
+const MAX_OUTPUT_CHARS = 4e3;
+function tail$1(s, n = 2e3) {
+	return s.length > n ? s.slice(-n) : s;
+}
+/**
+* Read `project.testCommand` from `.substrate/project-profile.yaml` under
+* `workingDir`. Line-based parse (no yaml dependency; same pattern as
+* detectBuildCommand's profile read). Returns undefined when absent.
+*/
+function detectTestCommand(workingDir) {
+	const profilePath = join$1(workingDir, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return void 0;
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const match = content.match(/^\s*testCommand:\s*['"]?(.+?)['"]?\s*$/m);
+		if (match?.[1] !== void 0 && match[1].length > 0) return match[1];
+	} catch {}
+	return void 0;
+}
+var TestSuiteCheck = class {
+	name = "test-suite";
+	tier = "A";
+	async run(context) {
+		const start = Date.now();
+		const explicitOverride = context.testCommand !== void 0;
+		const cmd = explicitOverride ? context.testCommand : detectTestCommand(context.workingDir);
+		if (!explicitOverride && process.env.VITEST !== void 0 && process.env.SUBSTRATE_ALLOW_NESTED_TESTS !== "1") {
+			const findings = [{
+				category: "test-suite-skip",
+				severity: "warn",
+				message: "recursion guard: refusing to run an auto-detected test suite from inside a test runner (VITEST is set). Pass an explicit testCommand, or set SUBSTRATE_ALLOW_NESTED_TESTS=1 in a harness that deliberately nests suite execution."
+			}];
+			return {
+				status: "warn",
+				details: renderFindings(findings),
+				duration_ms: Date.now() - start,
+				findings
+			};
+		}
+		if (cmd === void 0 || cmd === "") {
+			const findings = [{
+				category: "test-suite-skip",
+				severity: "warn",
+				message: `no test command configured for project at ${context.workingDir} — set project.testCommand in .substrate/project-profile.yaml (substrate init detects it) so verification runs the real suite`
+			}];
+			return {
+				status: "warn",
+				details: renderFindings(findings),
+				duration_ms: Date.now() - start,
+				findings
+			};
+		}
+		return new Promise((resolve$2) => {
+			const env = { ...process.env };
+			const parentNodeOpts = env["NODE_OPTIONS"] ?? "";
+			if (!parentNodeOpts.includes("--max-old-space-size")) env["NODE_OPTIONS"] = `${parentNodeOpts} --max-old-space-size=2048`.trim();
+			const child = spawn(cmd, [], {
+				cwd: context.workingDir,
+				detached: true,
+				shell: true,
+				env,
+				stdio: [
+					"ignore",
+					"pipe",
+					"pipe"
+				]
+			});
+			let stdout = "";
+			let stderr = "";
+			let output = "";
+			child.stdout?.on("data", (chunk) => {
+				const s = chunk.toString();
+				stdout += s;
+				output += s;
+			});
+			child.stderr?.on("data", (chunk) => {
+				const s = chunk.toString();
+				stderr += s;
+				output += s;
+			});
+			const timeoutHandle = setTimeout(() => {
+				try {
+					process.kill(-child.pid, "SIGKILL");
+				} catch {}
+				const duration = Date.now() - start;
+				const findings = [{
+					category: "test-suite-timeout",
+					severity: "error",
+					message: `test suite exceeded ${TEST_SUITE_CHECK_TIMEOUT_MS}ms`,
+					command: cmd,
+					stdoutTail: tail$1(stdout),
+					stderrTail: tail$1(stderr),
+					durationMs: duration
+				}];
+				resolve$2({
+					status: "fail",
+					details: renderFindings(findings),
+					duration_ms: duration,
+					findings
+				});
+			}, TEST_SUITE_CHECK_TIMEOUT_MS);
+			child.on("error", (err) => {
+				clearTimeout(timeoutHandle);
+				const duration = Date.now() - start;
+				const findings = [{
+					category: "test-suite-error",
+					severity: "error",
+					message: `test command could not be spawned: ${err.message}`,
+					command: cmd,
+					durationMs: duration
+				}];
+				resolve$2({
+					status: "fail",
+					details: renderFindings(findings),
+					duration_ms: duration,
+					findings
+				});
+			});
+			child.on("close", (code) => {
+				clearTimeout(timeoutHandle);
+				const duration = Date.now() - start;
+				if (code === 0) resolve$2({
+					status: "pass",
+					details: `test suite passed (${cmd})`,
+					duration_ms: duration,
+					findings: []
+				});
+				else {
+					const truncated = output.length > MAX_OUTPUT_CHARS ? output.slice(0, MAX_OUTPUT_CHARS) + "... (truncated)" : output;
+					const findings = [{
+						category: "test-suite-fail",
+						severity: "error",
+						message: `test suite failed (exit ${String(code)}): ${truncated}`,
+						command: cmd,
+						...code !== null ? { exitCode: code } : {},
 						stdoutTail: tail$1(stdout),
 						stderrTail: tail$1(stderr),
 						durationMs: duration
@@ -4082,6 +4256,7 @@ function createDefaultVerificationPipeline(bus, config) {
 		new TrivialOutputCheck(config),
 		new AcceptanceCriteriaEvidenceCheck(),
 		new BuildCheck(),
+		new TestSuiteCheck(),
 		new RuntimeProbeCheck(),
 		new SourceAcFidelityCheck(),
 		new SourceAcShelloutCheck(),
@@ -5865,4 +6040,4 @@ async function resolveRunManifest(dbRoot, runId) {
 
 //#endregion
 export { FindingsInjector, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery };
-//# sourceMappingURL=manifest-read-IvpNQ6Yy.js.map
+//# sourceMappingURL=manifest-read-BgZ6mR5R.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
-import "../../dist-BWCudDcl.js";
-import "../../manifest-read-IvpNQ6Yy.js";
-import { runInteractivePrompt } from "../../interactive-prompt-BypNgFHL.js";
+import "../../dist-DiNK6QOD.js";
+import "../../manifest-read-BgZ6mR5R.js";
+import { runInteractivePrompt } from "../../interactive-prompt-OMlqP7Lm.js";
 
 export { runInteractivePrompt };

package/dist/{routing-C0f2cYja.js → routing-_PGfe_cD.js}

@@ -1,4 +1,4 @@
-import { ModelRoutingConfigSchema, ProviderPolicySchema, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, TASK_TYPE_PHASE_MAP, getModelTier, loadModelRoutingConfig } from "./dist-BWCudDcl.js";
+import { ModelRoutingConfigSchema, ProviderPolicySchema, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, TASK_TYPE_PHASE_MAP, getModelTier, loadModelRoutingConfig } from "./dist-DiNK6QOD.js";
 import "./routing-DFxoKHDt.js";
 
 export { loadModelRoutingConfig };

package/dist/{run-eaZG_3rN.js → run-DHHryElL.js}

@@ -1,11 +1,11 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-BXVyiLiL.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-DTJaiJOd.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
-import { ADVISORY_NOTES, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createPipelineRun, createRequirement, createStderrLogger, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-BWCudDcl.js";
-import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-IvpNQ6Yy.js";
+import { ADVISORY_NOTES, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createPipelineRun, createRequirement, createStderrLogger, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-DiNK6QOD.js";
+import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-BgZ6mR5R.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-DZyJv5pV.js";
-import { deriveExitCode, routeDecision } from "./decision-router-DblHY8se.js";
-import { runInteractivePrompt } from "./interactive-prompt-BypNgFHL.js";
+import { deriveExitCode, routeDecision } from "./decision-router-BAPpON_C.js";
+import { runInteractivePrompt } from "./interactive-prompt-OMlqP7Lm.js";
 import { runRecoveryEngine } from "./recovery-engine-BKGBeBnW.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -159,6 +159,66 @@ function decideWorktreeReclaim(hasUncommittedChanges, commitsAhead, baseBranch)
 	};
 	return { safe: true };
 }
+/**
+* Decide whether removing a story worktree AND deleting its branch is safe
+* (H0.3, field findings #17/#19). Unsafe when:
+*   - the worktree has uncommitted changes (removal destroys the only copy), or
+*   - the branch carries commits not reachable from the project's current HEAD
+*     (branch -D destroys them — this is where H0.1's wip checkpoints live), or
+*   - either state could not be determined (negative unmergedCommits).
+*
+* Pure + exported for testing (mirrors decideWorktreeReclaim; the git I/O that
+* produces the inputs lives in inspectWorktreeRemovalSafety).
+*/
+function decideWorktreeRemoval(hasUncommittedChanges, uncommittedFiles, unmergedCommits, branchName) {
+	const reasons = [];
+	if (hasUncommittedChanges) {
+		const preview = uncommittedFiles.slice(0, 10).join(", ");
+		const more = uncommittedFiles.length > 10 ? ` (+${String(uncommittedFiles.length - 10)} more)` : "";
+		reasons.push(`the worktree has ${String(uncommittedFiles.length)} uncommitted change(s) that removal would destroy` + (preview.length > 0 ? `: ${preview}${more}` : ""));
+	}
+	if (unmergedCommits > 0) reasons.push(`branch ${branchName} carries ${String(unmergedCommits)} commit(s) not reachable from the current HEAD — deleting the branch would destroy them`);
+	if (unmergedCommits < 0) reasons.push("the branch state could not be verified as safe to discard");
+	return {
+		safe: reasons.length === 0,
+		reasons
+	};
+}
+/**
+* Gather the inputs for `decideWorktreeRemoval` from git. Thin I/O wrapper:
+*   - `git status --porcelain` inside the worktree (skipped when the directory
+*     is missing — nothing on disk to lose)
+*   - `git rev-list --count HEAD..<branch>` in the project root (commits the
+*     branch has that the current checkout does not; 0 when the branch is
+*     merged or absent, -1 when the count could not be determined)
+*/
+async function inspectWorktreeRemovalSafety(worktreePath, projectRoot, branchName) {
+	let hasUncommittedChanges = false;
+	let uncommittedFiles = [];
+	const worktreeOnDisk = await access$1(worktreePath).then(() => true).catch(() => false);
+	if (worktreeOnDisk) {
+		const statusResult = await spawnGit(["status", "--porcelain"], { cwd: worktreePath });
+		if (statusResult.code === 0) {
+			uncommittedFiles = statusResult.stdout.split("\n").filter((line) => line.trim().length > 0).map((line) => line.slice(3).trim());
+			hasUncommittedChanges = uncommittedFiles.length > 0;
+		} else return decideWorktreeRemoval(false, [], -1, branchName);
+	}
+	const branchExists = (await spawnGit([
+		"rev-parse",
+		"--verify",
+		branchName
+	], { cwd: projectRoot })).code === 0;
+	let unmergedCommits = 0;
+	if (branchExists) {
+		const aheadResult = await spawnGit([
+			"rev-list",
+			"--count",
+			`HEAD..${branchName}`
+		], { cwd: projectRoot });
+		unmergedCommits = aheadResult.code === 0 ? Number.parseInt(aheadResult.stdout.trim(), 10) || 0 : -1;
+	}
+	return decideWorktreeRemoval(hasUncommittedChanges, uncommittedFiles, unmergedCommits, branchName);
+}
 async function createWorktree(projectRoot, taskId, branchName, baseBranch, copyFiles = []) {
 	const worktreePath = path$5.join(projectRoot, ".substrate-worktrees", taskId);
 	const worktreeExists = await access$1(worktreePath).then(() => true).catch((err) => {
@@ -497,7 +557,8 @@ var GitWorktreeManagerImpl = class {
 			baseBranch,
 			copyFiles: this._copyFiles
 		}, "createWorktree");
-		await createWorktree(this._projectRoot, taskId, branchName, baseBranch, this._copyFiles);
+		const copyFiles = this._copyFiles.includes(".substrate/project-profile.yaml") ? this._copyFiles : [...this._copyFiles, ".substrate/project-profile.yaml"];
+		await createWorktree(this._projectRoot, taskId, branchName, baseBranch, copyFiles);
 		const createdAt = new Date();
 		this._eventBus.emit("worktree:created", {
 			taskId,
@@ -518,14 +579,19 @@ var GitWorktreeManagerImpl = class {
 		}, "Worktree created");
 		return info;
 	}
-	async cleanupWorktree(taskId) {
+	async cleanupWorktree(taskId, opts) {
 		const branchName = BRANCH_PREFIX + taskId;
 		const worktreePath = this.getWorktreePath(taskId);
 		this._logger.debug({
 			taskId,
 			branchName,
-			worktreePath
+			worktreePath,
+			force: opts?.force === true
 		}, "cleanupWorktree");
+		if (opts?.force !== true) {
+			const decision = await inspectWorktreeRemovalSafety(worktreePath, this._projectRoot, branchName);
+			if (!decision.safe) throw new Error(`refusing to clean up worktree for "${taskId}": ${decision.reasons.join("; ")}.\nInspect first (git -C ${worktreePath} status; git log ${branchName} --oneline) or re-run with --force to discard.`);
+		}
 		let worktreeExists = false;
 		try {
 			await access$1(worktreePath);
@@ -563,12 +629,28 @@ var GitWorktreeManagerImpl = class {
 			branchName
 		}, "Worktree cleaned up");
 	}
-	async cleanupAllWorktrees() {
-		this._logger.debug({ projectRoot: this._projectRoot }, "cleanupAllWorktrees");
+	async cleanupAllWorktrees(opts) {
+		this._logger.debug({
+			projectRoot: this._projectRoot,
+			force: opts?.force === true
+		}, "cleanupAllWorktrees");
 		const orphanedPaths = await getOrphanedWorktrees(this._projectRoot, this._baseDirectory);
 		let cleaned = 0;
 		for (const worktreePath of orphanedPaths) {
 			const taskId = path$4.basename(worktreePath);
+			const branchGuardName = BRANCH_PREFIX + taskId;
+			const decision = opts?.force === true ? {
+				safe: true,
+				reasons: []
+			} : await inspectWorktreeRemovalSafety(worktreePath, this._projectRoot, branchGuardName);
+			if (!decision.safe) {
+				this._logger.warn({
+					taskId,
+					worktreePath,
+					reasons: decision.reasons
+				}, "cleanupAllWorktrees: preserving worktree — removal would destroy work (use `substrate worktrees cleanup --force` to discard)");
+				continue;
+			}
 			let worktreeRemoved = false;
 			try {
 				await removeWorktree(worktreePath, this._projectRoot);
@@ -6813,6 +6895,21 @@ async function runCreateStory(deps, params) {
 	if (dispatchResult.parsed === null) {
 		const details = dispatchResult.parseError ?? "No YAML block found in output";
 		const rawSnippet = dispatchResult.output ? dispatchResult.output.slice(0, 1e3) : "(empty)";
+		const authSignature = detectClaudeAuthFailure(dispatchResult.output);
+		if (authSignature !== null) {
+			logger$21.error({
+				epicId,
+				storyKey,
+				authSignature,
+				rawOutputSnippet: rawSnippet
+			}, "Create-story dispatch died on authentication");
+			return {
+				result: "failed",
+				error: "auth-failure",
+				details: `Claude CLI authentication failure (matched: "${authSignature}"). Agent output: ${rawSnippet}`,
+				tokenUsage
+			};
+		}
 		logger$21.warn({
 			epicId,
 			storyKey,
@@ -8157,6 +8254,22 @@ function resolveDefaultTestPatterns(projectRoot) {
 //#endregion
 //#region src/modules/compiled-workflows/install-command.ts
 /**
+* Read a single `<key>: value` line from the project profile under
+* `projectRoot` (H1.2). Line-based parse, no yaml dependency. Returns
+* undefined when the profile or key is absent.
+*/
+function resolveProfileCommand(projectRoot, key) {
+	if (!projectRoot) return void 0;
+	const profilePath = join$1(projectRoot, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return void 0;
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const match$2 = content.match(new RegExp(`^\\s*${key}:\\s*['"]?(.+?)['"]?\\s*$`, "m"));
+		if (match$2?.[1] && match$2[1].length > 0) return match$2[1];
+	} catch {}
+	return void 0;
+}
+/**
 * Returns the install command string for the current project.
 * Used as a template variable ({{install_command}}) in the dev-story prompt.
 */
@@ -8180,6 +8293,7 @@ function resolveInstallCommand(projectRoot) {
 				cargo: "cargo add <package>",
 				pip: "pip install <package>",
 				poetry: "poetry add <package>",
+				uv: "uv add <package>",
 				gradle: "add dependency to build.gradle",
 				maven: "add dependency to pom.xml"
 			};
@@ -8420,7 +8534,7 @@ async function runDevStory(deps, params) {
 		},
 		{
 			name: "verify_command",
-			content: deps.pack.manifest.verifyCommand !== false ? deps.pack.manifest.verifyCommand ?? "npx turbo build" : "",
+			content: deps.pack.manifest.verifyCommand !== false ? deps.pack.manifest.verifyCommand ?? resolveProfileCommand(deps.projectRoot, "buildCommand") ?? "" : "",
 			priority: "optional"
 		},
 		{
@@ -11644,6 +11758,8 @@ function shouldRunTscCheck(projectRoot) {
 		if (!project) return true;
 		const packages = project["packages"];
 		if (Array.isArray(packages) && packages.length > 0) return packages.some((p) => p.language === "typescript" || p.language === "javascript");
+		const language = project["language"];
+		if (typeof language === "string" && language.length > 0) return language === "typescript" || language === "javascript";
 		const buildCommand = project["buildCommand"];
 		if (typeof buildCommand === "string" && buildCommand.length > 0) {
 			const tsIndicators = [
@@ -12490,6 +12606,8 @@ function assembleVerificationContext(opts) {
 	} catch {
 		commitSha = "unknown";
 	}
+	const profileBuildCommand = readProfileKey(opts.workingDir, "buildCommand");
+	const profileTestCommand = readProfileKey(opts.workingDir, "testCommand");
 	return {
 		storyKey: opts.storyKey,
 		workingDir: opts.workingDir,
@@ -12500,10 +12618,26 @@ function assembleVerificationContext(opts) {
 		devStoryResult: opts.devStoryResult,
 		outputTokenCount: opts.outputTokenCount,
 		sourceEpicContent: opts.sourceEpicContent,
-		runId: opts.runId
+		runId: opts.runId,
+		...profileBuildCommand !== void 0 ? { buildCommand: profileBuildCommand } : {},
+		...profileTestCommand !== void 0 ? { testCommand: profileTestCommand } : {}
 	};
 }
 /**
+* Read a single `<key>: value` line from `.substrate/project-profile.yaml`
+* under `workingDir` (H1.2). Line-based parse — no yaml dependency.
+*/
+function readProfileKey(workingDir, key) {
+	const profilePath = join$1(workingDir, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return void 0;
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const match$2 = content.match(new RegExp(`^\\s*${key}:\\s*['"]?(.+?)['"]?\\s*$`, "m"));
+		if (match$2?.[1] && match$2[1].length > 0) return match$2[1];
+	} catch {}
+	return void 0;
+}
+/**
 * In-memory store for VerificationSummary results, keyed by story key.
 *
 * Persists for the lifetime of the orchestrator instance. Does NOT write
@@ -13695,6 +13829,7 @@ function createImplementationOrchestrator(deps) {
 	const _costChecker = new CostGovernanceChecker();
 	let _costWarningEmitted = false;
 	let _budgetExhausted = false;
+	let _authFailureHalted = false;
 	let _shutdownRequested = false;
 	let _inFlightCount = 0;
 	let _drainResolve = null;
@@ -14018,6 +14153,21 @@ function createImplementationOrchestrator(deps) {
 				stderr: cp.stderr.slice(0, 500)
 			}, "escalation checkpoint failed — worktree state remains uncommitted (inspect before any cleanup)");
 		}
+		if (escalationWorktree !== void 0 && projectRoot !== void 0) {
+			const leakedFiles = detectWorkOutsideWorktree(escalationWorktree, projectRoot, checkGitDiffFiles);
+			if (leakedFiles.length > 0) {
+				const leakMsg = `PARENT-TREE LEAK: the MAIN checkout at ${projectRoot} carries ${String(leakedFiles.length)} uncommitted change(s) during this story's escalation (e.g. ${leakedFiles.slice(0, 10).join(", ")}). Story output may have landed OUTSIDE the worktree — inspect \`git -C ${projectRoot} status\` BEFORE any cleanup; reconcile-from-disk inspects the branch, not main, and will not see these files.`;
+				payload.issues = [...payload.issues, leakMsg];
+				eventBus.emit("orchestrator:story-warn", {
+					storyKey: payload.storyKey,
+					msg: leakMsg
+				});
+				logger$27.warn({
+					storyKey: payload.storyKey,
+					leakedFileCount: leakedFiles.length
+				}, "escalation parent-tree leak detected");
+			}
+		}
 		const diagnosis = generateEscalationDiagnosis(payload.issues, payload.reviewCycles, payload.lastVerdict);
 		eventBus.emit("orchestrator:story-escalated", {
 			...payload,
@@ -14494,6 +14644,20 @@ function createImplementationOrchestrator(deps) {
 						completedAt: new Date().toISOString()
 					});
 					await writeStoryMetricsBestEffort(storyKey, "failed", 0);
+					const authSignature = createResult.error === "auth-failure" ? createResult.details ?? "auth-failure" : detectClaudeAuthFailure(errMsg);
+					if (authSignature !== null) {
+						const authDetail = createResult.details ?? errMsg;
+						await emitEscalation({
+							storyKey,
+							lastVerdict: "auth-failure",
+							reviewCycles: 0,
+							issues: [authDetail, CLAUDE_AUTH_FAILURE_HINT],
+							escalationReason: "auth-failure"
+						});
+						await triggerAuthFailureHalt(storyKey, authSignature.slice(0, 200));
+						await persistState();
+						return;
+					}
 					const codexHint = detectCodexSandboxBlock(errMsg);
 					await emitEscalation({
 						storyKey,
@@ -15445,6 +15609,19 @@ function createImplementationOrchestrator(deps) {
 				completedAt: new Date().toISOString()
 			});
 			await writeStoryMetricsBestEffort(storyKey, "failed", 0);
+			const devAuthSignature = detectClaudeAuthFailure(errMsg);
+			if (devAuthSignature !== null) {
+				await emitEscalation({
+					storyKey,
+					lastVerdict: "auth-failure",
+					reviewCycles: 0,
+					issues: [errMsg, CLAUDE_AUTH_FAILURE_HINT],
+					escalationReason: "auth-failure"
+				});
+				await triggerAuthFailureHalt(storyKey, devAuthSignature);
+				await persistState();
+				return;
+			}
 			await emitEscalation({
 				storyKey,
 				lastVerdict: "dev-story-exception",
@@ -17193,6 +17370,64 @@ function createImplementationOrchestrator(deps) {
 	* @param result - The ceiling check result
 	* @param manifest - The current run manifest data
 	*/
+	/**
+	* H0.4 (field finding #10): halt the entire run when a dispatch dies on
+	* authentication. Auth failures are environmental, not story-specific —
+	* every subsequent dispatch fails identically, so continuing burns the
+	* whole batch (the field run lost ~25 minutes and two runs to this).
+	* Mirrors handleCeilingExceeded: routes through the Decision Router
+	* (severity fatal → halts under every --halt-on policy), sweeps PENDING
+	* stories to ESCALATED with a named reason, and reuses _budgetExhausted
+	* to stop the dispatch loop.
+	*/
+	async function triggerAuthFailureHalt(triggeredStoryKey, matchedSignature) {
+		if (_authFailureHalted) return;
+		_authFailureHalted = true;
+		_budgetExhausted = true;
+		const runId = config.pipelineRunId ?? "unknown";
+		const reason = `agent authentication failure on story ${triggeredStoryKey} (matched: "${matchedSignature}") — all subsequent dispatches would fail identically`;
+		let haltPolicy = "critical";
+		if (runManifest !== null) try {
+			const manifest = await runManifest.read();
+			haltPolicy = manifest.cli_flags.halt_on ?? "critical";
+		} catch {}
+		const routeResult = routeDecision("auth-failure", haltPolicy);
+		eventBus.emit("decision:halt", {
+			runId,
+			decisionType: "auth-failure",
+			severity: routeResult.severity,
+			reason
+		});
+		await runInteractivePrompt({
+			runId,
+			decisionType: "auth-failure",
+			severity: routeResult.severity,
+			summary: reason,
+			defaultAction: routeResult.defaultAction,
+			choices: ["abort-run"],
+			onHaltSkipped: (payload) => {
+				eventBus.emit("decision:halt-skipped-non-interactive", payload);
+			}
+		}).catch((err) => {
+			logger$27.warn({ err }, "interactive prompt failed during auth-failure halt — halting anyway");
+		});
+		for (const [key, state] of _stories) if (state.phase === "PENDING" && key !== triggeredStoryKey) {
+			updateStory(key, {
+				phase: "ESCALATED",
+				error: "auth-failure-halt",
+				completedAt: new Date().toISOString()
+			});
+			if (runManifest !== null && runManifest !== void 0) runManifest.patchStoryState(key, {
+				status: "escalated",
+				escalation_reason: "auth-failure-halt"
+			}).catch(() => {});
+		}
+		logger$27.error({
+			runId,
+			triggeredStoryKey,
+			matchedSignature
+		}, "RUN HALTED: agent authentication failure — fix credentials and re-run");
+	}
 	async function handleCeilingExceeded(triggeredStoryKey, remainingInGroup, result, manifest) {
 		const haltPolicy = manifest.cli_flags.halt_on ?? "critical";
 		const routeResult = routeDecision("cost-ceiling-exhausted", haltPolicy);
@@ -47736,7 +47971,7 @@ async function runFullPipeline(options) {
 */
 async function emitPreDispatchVersionAdvisory(currentVersion) {
 	if (process.env["SUBSTRATE_NO_UPDATE_CHECK"] === "1") return;
-	const { createVersionManager } = await import("./version-manager-impl-CfzcfFwo.js");
+	const { createVersionManager } = await import("./version-manager-impl-HJMonRJi.js");
 	const vm = createVersionManager();
 	const result = await vm.checkForUpdates(true);
 	const gap = classifyVersionGap(currentVersion, result.latestVersion);
@@ -47833,4 +48068,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createGitWorktreeManager, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-eaZG_3rN.js.map
+//# sourceMappingURL=run-DHHryElL.js.map

package/dist/{run-Cp19x4Xv.js → run-DStT56J1.js}

@@ -1,14 +1,14 @@
-import "./health-BXVyiLiL.js";
+import "./health-DTJaiJOd.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
-import "./dist-BWCudDcl.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-eaZG_3rN.js";
-import "./manifest-read-IvpNQ6Yy.js";
+import "./dist-DiNK6QOD.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-DHHryElL.js";
+import "./manifest-read-BgZ6mR5R.js";
 import "./routing-DFxoKHDt.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
-import "./decision-router-DblHY8se.js";
-import "./interactive-prompt-BypNgFHL.js";
+import "./decision-router-BAPpON_C.js";
+import "./interactive-prompt-OMlqP7Lm.js";
 import "./recovery-engine-BKGBeBnW.js";
 
 export { runRunAction };

package/dist/src/modules/decision-router/index.d.ts

@@ -21,7 +21,7 @@ type Severity = 'info' | 'warning' | 'critical' | 'fatal';
  * All known halt-able decision types (AC1).
  * Epic 73 (Recovery Engine) will extend this union with additional types.
  */
-type DecisionType = 'cost-ceiling-exhausted' | 'build-verification-failure' | 'recovery-retry-attempt' | 're-scope-proposal' | 'scope-violation' | 'cross-story-race-recovered' | 'cross-story-race-still-failed' | 'pipeline-escalation';
+type DecisionType = 'cost-ceiling-exhausted' | 'build-verification-failure' | 'recovery-retry-attempt' | 're-scope-proposal' | 'scope-violation' | 'cross-story-race-recovered' | 'cross-story-race-still-failed' | 'pipeline-escalation' | 'auth-failure';
 /**
  * Maps each known decision type to its severity level.
  *

package/dist/src/modules/decision-router/index.js

@@ -1,3 +1,3 @@
-import { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision } from "../../../decision-router-DblHY8se.js";
+import { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision } from "../../../decision-router-BAPpON_C.js";
 
 export { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision };

package/dist/{upgrade-DHHSy4fQ.js → upgrade-CTj4hi8J.js}

@@ -1,5 +1,5 @@
-import "./dist-BWCudDcl.js";
+import "./dist-DiNK6QOD.js";
 import "./version-manager-impl-qFBiO4Eh.js";
-import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-3NTcs1t7.js";
+import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-DB7KzD9c.js";
 
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };

package/dist/{upgrade-3NTcs1t7.js → upgrade-DB7KzD9c.js}

@@ -1,4 +1,4 @@
-import { createVersionManager } from "./dist-BWCudDcl.js";
+import { createVersionManager } from "./dist-DiNK6QOD.js";
 import { execSync, spawn } from "child_process";
 import * as readline from "readline";
 
@@ -123,4 +123,4 @@ function registerUpgradeCommand(program) {
 
 //#endregion
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };
-//# sourceMappingURL=upgrade-3NTcs1t7.js.map
+//# sourceMappingURL=upgrade-DB7KzD9c.js.map

package/dist/{version-manager-impl-CfzcfFwo.js → version-manager-impl-HJMonRJi.js}

@@ -1,4 +1,4 @@
-import { VersionManagerImpl, createVersionManager } from "./dist-BWCudDcl.js";
+import { VersionManagerImpl, createVersionManager } from "./dist-DiNK6QOD.js";
 import "./version-manager-impl-qFBiO4Eh.js";
 
 export { createVersionManager };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.20.139",
+  "version": "0.20.142",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",

package/dist/adapter-registry-CXIG-OQI.js

@@ -1,4 +0,0 @@
-import { AdapterRegistry } from "./dist-BWCudDcl.js";
-import "./adapter-registry-DIcrxjH8.js";
-
-export { AdapterRegistry };