substrate-ai 0.20.141 → 0.20.143

package/dist/cli/index.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-BQRsVP6s.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-FUl73R5F.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
 import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-DiNK6QOD.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createGitWorktreeManager, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-CRvusFIv.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createGitWorktreeManager, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-B2duge-W.js";
 import "../adapter-registry-DIcrxjH8.js";
-import { RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-Doh2Ion5.js";
+import { RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-BkijWyWk.js";
 import "../errors-B21JUhcc.js";
 import "../routing-DFxoKHDt.js";
 import { WorkGraphRepository } from "../work-graph-repository-DZyJv5pV.js";
 import "../decisions-CzSIEeGP.js";
 import "../decision-router-BAPpON_C.js";
-import "../interactive-prompt-CgerI5Y6.js";
+import "../interactive-prompt-CtO5Tm6u.js";
 import "../recovery-engine-BKGBeBnW.js";
 import "../version-manager-impl-qFBiO4Eh.js";
 import { registerUpgradeCommand } from "../upgrade-DB7KzD9c.js";
@@ -670,6 +670,7 @@ const WHOLESALE_SUBSTRATE_IGNORES = new Set([
 ]);
 const STAR = ".substrate/*";
 const CONFIG_NEGATION = "!.substrate/config.yaml";
+const PROFILE_NEGATION = "!.substrate/project-profile.yaml";
 const CODEX_PROMPTS = ".codex/prompts/";
 const CODEX_SKILLS = ".codex/skills/";
 /**
@@ -685,6 +686,9 @@ function computeSubstrateGitignore(existing) {
 	const negIdx = trimmed.lastIndexOf(CONFIG_NEGATION);
 	const negationEffective = negIdx !== -1 && negIdx > starIdx;
 	if (!negationEffective) append.push(CONFIG_NEGATION);
+	const profileNegIdx = trimmed.lastIndexOf(PROFILE_NEGATION);
+	const profileNegationEffective = profileNegIdx !== -1 && profileNegIdx > starIdx;
+	if (!profileNegationEffective) append.push(PROFILE_NEGATION);
 	if (!trimmed.includes(CODEX_PROMPTS)) append.push(CODEX_PROMPTS);
 	if (!trimmed.includes(CODEX_SKILLS)) append.push(CODEX_SKILLS);
 	let content = lines.join("\n");
@@ -925,6 +929,18 @@ async function detectSingleProjectStack(dir) {
 			break;
 		}
 		if (marker.file === "pyproject.toml") {
+			const hasUv = await fileExists(path$1.join(dir, "uv.lock"));
+			if (hasUv) {
+				baseEntry = {
+					path: dir,
+					language: "python",
+					buildTool: "uv",
+					buildCommand: "uv sync",
+					testCommand: "uv run pytest",
+					installCommand: "uv add <package>"
+				};
+				break;
+			}
 			const hasPoetry = await fileExists(path$1.join(dir, "poetry.lock"));
 			if (hasPoetry) {
 				baseEntry = {
@@ -7036,7 +7052,7 @@ async function runStatusAction(options) {
 			logger$15.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-Cm-pA1mZ.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-CoxLvCcT.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -8565,7 +8581,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-BHRkyn_H.js"
+									"../run-DRwOPt3k.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({

package/dist/{health-Cm-pA1mZ.js → health-CoxLvCcT.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-BQRsVP6s.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-FUl73R5F.js";
 import "./logger-KeHncl-f.js";
 import "./dist-DiNK6QOD.js";
-import "./manifest-read-Doh2Ion5.js";
+import "./manifest-read-BkijWyWk.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 

package/dist/{health-BQRsVP6s.js → health-FUl73R5F.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
 import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-DiNK6QOD.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-Doh2Ion5.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-BkijWyWk.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-BQRsVP6s.js.map
+//# sourceMappingURL=health-FUl73R5F.js.map

package/dist/{interactive-prompt-CgerI5Y6.js → interactive-prompt-CtO5Tm6u.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-Doh2Ion5.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-BkijWyWk.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-CgerI5Y6.js.map
+//# sourceMappingURL=interactive-prompt-CtO5Tm6u.js.map

package/dist/{manifest-read-Doh2Ion5.js → manifest-read-BkijWyWk.js}

@@ -8,7 +8,7 @@ import { YAMLException, load } from "js-yaml";
 import { existsSync, promises, readFileSync, readdirSync, statSync } from "node:fs";
 import { execSync, spawn } from "node:child_process";
 import * as path$2 from "node:path";
-import { basename as basename$1, dirname as dirname$1, join as join$1, resolve as resolve$1 } from "node:path";
+import { basename as basename$1, delimiter, dirname as dirname$1, join as join$1, resolve as resolve$1 } from "node:path";
 import { z } from "zod";
 import { mkdir as mkdir$1, open, readFile as readFile$1, unlink as unlink$1, writeFile as writeFile$1 } from "node:fs/promises";
 import * as fs from "fs";
@@ -2043,11 +2043,11 @@ function findCodeEvidence(opts) {
 /** Hard timeout for the build command in milliseconds (FR-V11). */
 const BUILD_CHECK_TIMEOUT_MS = 6e4;
 /** Maximum characters to include in details string from build output. */
-const MAX_OUTPUT_CHARS = 2e3;
+const MAX_OUTPUT_CHARS$1 = 2e3;
 /** Per-stream tail size cap for structured findings (story 55-1 convention). */
 const TAIL_BYTES = 4 * 1024;
 /** Return the last N bytes of a UTF-8 string, sliced by string length for simplicity. */
-function tail$1(text, bytes = TAIL_BYTES) {
+function tail$2(text, bytes = TAIL_BYTES) {
 	return text.length <= bytes ? text : text.slice(text.length - bytes);
 }
 /**
@@ -2061,11 +2061,9 @@ function tail$1(text, bytes = TAIL_BYTES) {
 * This function inlines the detection logic independently.
 */
 function detectBuildCommand(workingDir) {
+	const profileCommand = readProfileBuildCommand(workingDir);
+	if (profileCommand !== void 0) return profileCommand;
 	if (existsSync(join$1(workingDir, "turbo.json"))) return "turbo build";
-	if (existsSync(join$1(workingDir, "pnpm-lock.yaml"))) return "pnpm run build";
-	if (existsSync(join$1(workingDir, "yarn.lock"))) return "yarn build";
-	if (existsSync(join$1(workingDir, "bun.lockb"))) return "bun run build";
-	if (existsSync(join$1(workingDir, "package.json"))) return "npm run build";
 	const nonNodeMarkers = [
 		"pyproject.toml",
 		"poetry.lock",
@@ -2074,9 +2072,29 @@ function detectBuildCommand(workingDir) {
 		"go.mod"
 	];
 	for (const marker of nonNodeMarkers) if (existsSync(join$1(workingDir, marker))) return "";
+	if (existsSync(join$1(workingDir, "pnpm-lock.yaml"))) return "pnpm run build";
+	if (existsSync(join$1(workingDir, "yarn.lock"))) return "yarn build";
+	if (existsSync(join$1(workingDir, "bun.lockb"))) return "bun run build";
+	if (existsSync(join$1(workingDir, "package.json"))) return "npm run build";
 	return "";
 }
 /**
+* Read `project.buildCommand` from `.substrate/project-profile.yaml` under
+* `workingDir`. Line-based parse (same approach as the monolith's
+* resolveInstallCommand) to avoid a yaml dependency. Returns undefined when
+* the profile is absent, unreadable, or has no buildCommand.
+*/
+function readProfileBuildCommand(workingDir) {
+	const profilePath = join$1(workingDir, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return void 0;
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const match = content.match(/^\s*buildCommand:\s*['"]?(.+?)['"]?\s*$/m);
+		if (match?.[1] !== void 0 && match[1].length > 0) return match[1];
+	} catch {}
+	return void 0;
+}
+/**
 * Runs the project's build command and returns pass/warn/fail based on exit code.
 *
 * AC1: exit code 0 → pass
@@ -2139,8 +2157,8 @@ var BuildCheck = class {
 					severity: "error",
 					message: `command exceeded ${BUILD_CHECK_TIMEOUT_MS}ms`,
 					command: cmd,
-					stdoutTail: tail$1(stdout),
-					stderrTail: tail$1(stderr),
+					stdoutTail: tail$2(stdout),
+					stderrTail: tail$2(stderr),
 					durationMs: duration
 				}];
 				resolve$2({
@@ -2160,13 +2178,169 @@ var BuildCheck = class {
 					findings: []
 				});
 				else {
-					const truncated = output.length > MAX_OUTPUT_CHARS ? output.slice(0, MAX_OUTPUT_CHARS) + "... (truncated)" : output;
+					const truncated = output.length > MAX_OUTPUT_CHARS$1 ? output.slice(0, MAX_OUTPUT_CHARS$1) + "... (truncated)" : output;
 					const findings = [{
 						category: "build-error",
 						severity: "error",
 						message: `build failed (exit ${code}): ${truncated}`,
 						command: cmd,
 						...code !== null ? { exitCode: code } : {},
+						stdoutTail: tail$2(stdout),
+						stderrTail: tail$2(stderr),
+						durationMs: duration
+					}];
+					resolve$2({
+						status: "fail",
+						details: renderFindings(findings),
+						duration_ms: duration,
+						findings
+					});
+				}
+			});
+		});
+	}
+};
+
+//#endregion
+//#region packages/sdlc/dist/verification/checks/test-suite-check.js
+/** Hard ceiling for the suite run (ms). Suites are slower than builds. */
+const TEST_SUITE_CHECK_TIMEOUT_MS = 3e5;
+/** Cap on captured output embedded in the finding. */
+const MAX_OUTPUT_CHARS = 4e3;
+function tail$1(s, n = 2e3) {
+	return s.length > n ? s.slice(-n) : s;
+}
+/**
+* Read `project.testCommand` from `.substrate/project-profile.yaml` under
+* `workingDir`. Line-based parse (no yaml dependency; same pattern as
+* detectBuildCommand's profile read). Returns undefined when absent.
+*/
+function detectTestCommand(workingDir) {
+	const profilePath = join$1(workingDir, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return void 0;
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const match = content.match(/^\s*testCommand:\s*['"]?(.+?)['"]?\s*$/m);
+		if (match?.[1] !== void 0 && match[1].length > 0) return match[1];
+	} catch {}
+	return void 0;
+}
+var TestSuiteCheck = class {
+	name = "test-suite";
+	tier = "A";
+	async run(context) {
+		const start = Date.now();
+		const explicitOverride = context.testCommand !== void 0;
+		const cmd = explicitOverride ? context.testCommand : detectTestCommand(context.workingDir);
+		if (!explicitOverride && process.env.VITEST !== void 0 && process.env.SUBSTRATE_ALLOW_NESTED_TESTS !== "1") {
+			const findings = [{
+				category: "test-suite-skip",
+				severity: "warn",
+				message: "recursion guard: refusing to run an auto-detected test suite from inside a test runner (VITEST is set). Pass an explicit testCommand, or set SUBSTRATE_ALLOW_NESTED_TESTS=1 in a harness that deliberately nests suite execution."
+			}];
+			return {
+				status: "warn",
+				details: renderFindings(findings),
+				duration_ms: Date.now() - start,
+				findings
+			};
+		}
+		if (cmd === void 0 || cmd === "") {
+			const findings = [{
+				category: "test-suite-skip",
+				severity: "warn",
+				message: `no test command configured for project at ${context.workingDir} — set project.testCommand in .substrate/project-profile.yaml (substrate init detects it) so verification runs the real suite`
+			}];
+			return {
+				status: "warn",
+				details: renderFindings(findings),
+				duration_ms: Date.now() - start,
+				findings
+			};
+		}
+		return new Promise((resolve$2) => {
+			const env = { ...process.env };
+			const parentNodeOpts = env["NODE_OPTIONS"] ?? "";
+			if (!parentNodeOpts.includes("--max-old-space-size")) env["NODE_OPTIONS"] = `${parentNodeOpts} --max-old-space-size=2048`.trim();
+			const child = spawn(cmd, [], {
+				cwd: context.workingDir,
+				detached: true,
+				shell: true,
+				env,
+				stdio: [
+					"ignore",
+					"pipe",
+					"pipe"
+				]
+			});
+			let stdout = "";
+			let stderr = "";
+			let output = "";
+			child.stdout?.on("data", (chunk) => {
+				const s = chunk.toString();
+				stdout += s;
+				output += s;
+			});
+			child.stderr?.on("data", (chunk) => {
+				const s = chunk.toString();
+				stderr += s;
+				output += s;
+			});
+			const timeoutHandle = setTimeout(() => {
+				try {
+					process.kill(-child.pid, "SIGKILL");
+				} catch {}
+				const duration = Date.now() - start;
+				const findings = [{
+					category: "test-suite-timeout",
+					severity: "error",
+					message: `test suite exceeded ${TEST_SUITE_CHECK_TIMEOUT_MS}ms`,
+					command: cmd,
+					stdoutTail: tail$1(stdout),
+					stderrTail: tail$1(stderr),
+					durationMs: duration
+				}];
+				resolve$2({
+					status: "fail",
+					details: renderFindings(findings),
+					duration_ms: duration,
+					findings
+				});
+			}, TEST_SUITE_CHECK_TIMEOUT_MS);
+			child.on("error", (err) => {
+				clearTimeout(timeoutHandle);
+				const duration = Date.now() - start;
+				const findings = [{
+					category: "test-suite-error",
+					severity: "error",
+					message: `test command could not be spawned: ${err.message}`,
+					command: cmd,
+					durationMs: duration
+				}];
+				resolve$2({
+					status: "fail",
+					details: renderFindings(findings),
+					duration_ms: duration,
+					findings
+				});
+			});
+			child.on("close", (code) => {
+				clearTimeout(timeoutHandle);
+				const duration = Date.now() - start;
+				if (code === 0) resolve$2({
+					status: "pass",
+					details: `test suite passed (${cmd})`,
+					duration_ms: duration,
+					findings: []
+				});
+				else {
+					const truncated = output.length > MAX_OUTPUT_CHARS ? output.slice(0, MAX_OUTPUT_CHARS) + "... (truncated)" : output;
+					const findings = [{
+						category: "test-suite-fail",
+						severity: "error",
+						message: `test suite failed (exit ${String(code)}): ${truncated}`,
+						command: cmd,
+						...code !== null ? { exitCode: code } : {},
 						stdoutTail: tail$1(stdout),
 						stderrTail: tail$1(stderr),
 						durationMs: duration
@@ -2380,6 +2554,35 @@ function parseRuntimeProbes(storyContent) {
 
 //#endregion
 //#region packages/sdlc/dist/verification/probes/executor.js
+/**
+* H1.3 (hardening program, field finding #6): shape the probe environment so
+* probe commands run in the PROJECT'S environment, not the orchestrator's.
+*
+* The field failure: probe `registry-rejects-undeclared-source` ran bare
+* `python` from the inherited PATH — outside the project venv — and died with
+* `ModuleNotFoundError: No module named 'structlog'` even though the behavior
+* it tested passed in-env. That single false negative flipped an
+* LGTM_WITH_NOTES story to VERIFICATION_FAILED and destabilized the rest of
+* the run.
+*
+* When the working dir carries a project-local env (`.venv/bin` — created by
+* uv, venv, virtualenv alike), prepend it to PATH and set VIRTUAL_ENV so bare
+* `python`/`pytest`/console-script invocations resolve inside the project.
+* PATH prepending (rather than command rewriting) is quoting-hazard-free and
+* tool-agnostic. POSIX layout only (`bin/`) — matches substrate's supported
+* platforms; extend for `Scripts/` if Windows dispatch ever lands.
+*
+* Pure given (cwd, baseEnv) + exported for testing.
+*/
+function buildProbeEnv(cwd, baseEnv = process.env) {
+	const venvBin = join$1(cwd, ".venv", "bin");
+	if (!existsSync(venvBin)) return baseEnv;
+	return {
+		...baseEnv,
+		VIRTUAL_ENV: join$1(cwd, ".venv"),
+		PATH: `${venvBin}${delimiter}${baseEnv.PATH ?? ""}`
+	};
+}
 /** Return the last N bytes of a UTF-8 string (sliced by length for simplicity). */
 function tail(text, bytes = PROBE_TAIL_BYTES) {
 	return text.length <= bytes ? text : text.slice(text.length - bytes);
@@ -2868,7 +3071,13 @@ function probesInvokeProductionTrigger(probes) {
 	for (const probe of probes) for (const pattern of TRIGGER_COMMAND_PATTERNS) if (pattern.test(probe.command)) return true;
 	return false;
 }
-const defaultExecutors = { host: (probe, cwd) => executeProbeOnHost(probe, { cwd: cwd ?? process.cwd() }) };
+const defaultExecutors = { host: (probe, cwd) => {
+	const effectiveCwd = cwd ?? process.cwd();
+	return executeProbeOnHost(probe, {
+		cwd: effectiveCwd,
+		env: buildProbeEnv(effectiveCwd)
+	});
+} };
 var RuntimeProbeCheck = class {
 	name = "runtime-probes";
 	tier = "A";
@@ -4082,6 +4291,7 @@ function createDefaultVerificationPipeline(bus, config) {
 		new TrivialOutputCheck(config),
 		new AcceptanceCriteriaEvidenceCheck(),
 		new BuildCheck(),
+		new TestSuiteCheck(),
 		new RuntimeProbeCheck(),
 		new SourceAcFidelityCheck(),
 		new SourceAcShelloutCheck(),
@@ -5865,4 +6075,4 @@ async function resolveRunManifest(dbRoot, runId) {
 
 //#endregion
 export { FindingsInjector, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery };
-//# sourceMappingURL=manifest-read-Doh2Ion5.js.map
+//# sourceMappingURL=manifest-read-BkijWyWk.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
 import "../../dist-DiNK6QOD.js";
-import "../../manifest-read-Doh2Ion5.js";
-import { runInteractivePrompt } from "../../interactive-prompt-CgerI5Y6.js";
+import "../../manifest-read-BkijWyWk.js";
+import { runInteractivePrompt } from "../../interactive-prompt-CtO5Tm6u.js";
 
 export { runInteractivePrompt };

package/dist/{run-CRvusFIv.js → run-B2duge-W.js}

@@ -1,11 +1,11 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-BQRsVP6s.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-FUl73R5F.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
 import { ADVISORY_NOTES, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createPipelineRun, createRequirement, createStderrLogger, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-DiNK6QOD.js";
-import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-Doh2Ion5.js";
+import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-BkijWyWk.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-DZyJv5pV.js";
 import { deriveExitCode, routeDecision } from "./decision-router-BAPpON_C.js";
-import { runInteractivePrompt } from "./interactive-prompt-CgerI5Y6.js";
+import { runInteractivePrompt } from "./interactive-prompt-CtO5Tm6u.js";
 import { runRecoveryEngine } from "./recovery-engine-BKGBeBnW.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -557,7 +557,8 @@ var GitWorktreeManagerImpl = class {
 			baseBranch,
 			copyFiles: this._copyFiles
 		}, "createWorktree");
-		await createWorktree(this._projectRoot, taskId, branchName, baseBranch, this._copyFiles);
+		const copyFiles = this._copyFiles.includes(".substrate/project-profile.yaml") ? this._copyFiles : [...this._copyFiles, ".substrate/project-profile.yaml"];
+		await createWorktree(this._projectRoot, taskId, branchName, baseBranch, copyFiles);
 		const createdAt = new Date();
 		this._eventBus.emit("worktree:created", {
 			taskId,
@@ -8253,6 +8254,22 @@ function resolveDefaultTestPatterns(projectRoot) {
 //#endregion
 //#region src/modules/compiled-workflows/install-command.ts
 /**
+* Read a single `<key>: value` line from the project profile under
+* `projectRoot` (H1.2). Line-based parse, no yaml dependency. Returns
+* undefined when the profile or key is absent.
+*/
+function resolveProfileCommand(projectRoot, key) {
+	if (!projectRoot) return void 0;
+	const profilePath = join$1(projectRoot, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return void 0;
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const match$2 = content.match(new RegExp(`^\\s*${key}:\\s*['"]?(.+?)['"]?\\s*$`, "m"));
+		if (match$2?.[1] && match$2[1].length > 0) return match$2[1];
+	} catch {}
+	return void 0;
+}
+/**
 * Returns the install command string for the current project.
 * Used as a template variable ({{install_command}}) in the dev-story prompt.
 */
@@ -8276,6 +8293,7 @@ function resolveInstallCommand(projectRoot) {
 				cargo: "cargo add <package>",
 				pip: "pip install <package>",
 				poetry: "poetry add <package>",
+				uv: "uv add <package>",
 				gradle: "add dependency to build.gradle",
 				maven: "add dependency to pom.xml"
 			};
@@ -8516,7 +8534,7 @@ async function runDevStory(deps, params) {
 		},
 		{
 			name: "verify_command",
-			content: deps.pack.manifest.verifyCommand !== false ? deps.pack.manifest.verifyCommand ?? "npx turbo build" : "",
+			content: deps.pack.manifest.verifyCommand !== false ? deps.pack.manifest.verifyCommand ?? resolveProfileCommand(deps.projectRoot, "buildCommand") ?? "" : "",
 			priority: "optional"
 		},
 		{
@@ -11740,6 +11758,8 @@ function shouldRunTscCheck(projectRoot) {
 		if (!project) return true;
 		const packages = project["packages"];
 		if (Array.isArray(packages) && packages.length > 0) return packages.some((p) => p.language === "typescript" || p.language === "javascript");
+		const language = project["language"];
+		if (typeof language === "string" && language.length > 0) return language === "typescript" || language === "javascript";
 		const buildCommand = project["buildCommand"];
 		if (typeof buildCommand === "string" && buildCommand.length > 0) {
 			const tsIndicators = [
@@ -12586,6 +12606,8 @@ function assembleVerificationContext(opts) {
 	} catch {
 		commitSha = "unknown";
 	}
+	const profileBuildCommand = readProfileKey(opts.workingDir, "buildCommand");
+	const profileTestCommand = readProfileKey(opts.workingDir, "testCommand");
 	return {
 		storyKey: opts.storyKey,
 		workingDir: opts.workingDir,
@@ -12596,10 +12618,26 @@ function assembleVerificationContext(opts) {
 		devStoryResult: opts.devStoryResult,
 		outputTokenCount: opts.outputTokenCount,
 		sourceEpicContent: opts.sourceEpicContent,
-		runId: opts.runId
+		runId: opts.runId,
+		...profileBuildCommand !== void 0 ? { buildCommand: profileBuildCommand } : {},
+		...profileTestCommand !== void 0 ? { testCommand: profileTestCommand } : {}
 	};
 }
 /**
+* Read a single `<key>: value` line from `.substrate/project-profile.yaml`
+* under `workingDir` (H1.2). Line-based parse — no yaml dependency.
+*/
+function readProfileKey(workingDir, key) {
+	const profilePath = join$1(workingDir, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return void 0;
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const match$2 = content.match(new RegExp(`^\\s*${key}:\\s*['"]?(.+?)['"]?\\s*$`, "m"));
+		if (match$2?.[1] && match$2[1].length > 0) return match$2[1];
+	} catch {}
+	return void 0;
+}
+/**
 * In-memory store for VerificationSummary results, keyed by story key.
 *
 * Persists for the lifetime of the orchestrator instance. Does NOT write
@@ -13452,6 +13490,34 @@ function summarizeEscalationIssues(issues, cap = 4e3) {
 * the opaque verdict. Best-effort: a probe failure yields an empty list (never
 * blocks escalation). Exported for unit testing.
 */
+/**
+* H1.4 (hardening program, field finding #13): classify a story's ground-truth
+* git diff into implementation vs. pipeline-artifact changes.
+*
+* The field failure: story 2-3 returned status=complete with "239 tests pass"
+* while its branch contained ONLY the create-story spec file — zero source,
+* zero tests (the 239 were the pre-existing suite; true but vacuous). The
+* zero-diff gate never fired because the spec .md IS a diff entry.
+*
+* A file counts as implementation when it lives outside substrate's own
+* artifact trees (`_bmad-output/`, `.substrate/`). Story specs, planning
+* artifacts, and manifest state are pipeline bookkeeping — a "successful"
+* dev pass whose diff is bookkeeping-only produced no implementation.
+*
+* Pure + exported for unit testing.
+*/
+function classifyImplementationDiff(files) {
+	const isArtifact = (f$1) => {
+		const norm = f$1.replace(/\\/g, "/").replace(/^\.\//, "");
+		return norm.startsWith("_bmad-output/") || norm.startsWith(".substrate/");
+	};
+	const artifactOnly = files.filter(isArtifact);
+	const hasImplementation = files.some((f$1) => !isArtifact(f$1));
+	return {
+		hasImplementation,
+		artifactOnly
+	};
+}
 function detectWorkOutsideWorktree(effectiveProjectRoot, projectRoot, checkDiff) {
 	const inWorktreeMode = effectiveProjectRoot !== void 0 && projectRoot !== void 0 && effectiveProjectRoot !== projectRoot;
 	if (!inWorktreeMode) return [];
@@ -15662,6 +15728,31 @@ function createImplementationOrchestrator(deps) {
 				}
 			}
 		}
+		if (devStoryWasSuccess && gitDiffFiles !== void 0 && gitDiffFiles.length > 0) {
+			const implClassification = classifyImplementationDiff(gitDiffFiles);
+			if (!implClassification.hasImplementation) {
+				logger$27.warn({
+					storyKey,
+					artifactFiles: implClassification.artifactOnly.slice(0, 10)
+				}, "dev-story reported success but the diff contains only pipeline artifacts — no implementation was produced");
+				endPhase(storyKey, "dev-story", devStoryModel);
+				updateStory(storyKey, {
+					phase: "ESCALATED",
+					error: "no-implementation",
+					completedAt: new Date().toISOString()
+				});
+				await writeStoryMetricsBestEffort(storyKey, "escalated", 0);
+				await emitEscalation({
+					storyKey,
+					lastVerdict: "no-implementation",
+					reviewCycles: 0,
+					issues: [`dev-story reported COMPLETE but every changed file is a pipeline artifact (${implClassification.artifactOnly.slice(0, 10).join(", ")}) — no source or test files were produced. Self-reported test results on such a story are vacuous (they exercise the pre-existing suite).`],
+					escalationReason: "no-implementation"
+				});
+				await persistState();
+				return;
+			}
+		}
 		let _devOutputCommitHookFailure;
 		const _commitFirstEligible = !noWorktree && _worktreeManager !== void 0 && effectiveProjectRoot !== void 0 && effectiveProjectRoot !== projectRoot;
 		if (_commitFirstEligible && effectiveProjectRoot !== void 0) {
@@ -29930,7 +30021,7 @@ var require_uri_all = __commonJS({ "node_modules/uri-js/dist/es5/uri.all.js"(exp
 		var damp = 700;
 		var initialBias = 72;
 		var initialN = 128;
-		var delimiter = "-";
+		var delimiter$1 = "-";
 		/** Regular expressions */
 		var regexPunycode = /^xn--/;
 		var regexNonASCII = /[^\0-\x7E]/;
@@ -30085,7 +30176,7 @@ var require_uri_all = __commonJS({ "node_modules/uri-js/dist/es5/uri.all.js"(exp
 			var i = 0;
 			var n$1 = initialN;
 			var bias = initialBias;
-			var basic = input.lastIndexOf(delimiter);
+			var basic = input.lastIndexOf(delimiter$1);
 			if (basic < 0) basic = 0;
 			for (var j$1 = 0; j$1 < basic; ++j$1) {
 				if (input.charCodeAt(j$1) >= 128) error$1("not-basic");
@@ -30147,7 +30238,7 @@ var require_uri_all = __commonJS({ "node_modules/uri-js/dist/es5/uri.all.js"(exp
 			}
 			var basicLength = output.length;
 			var handledCPCount = basicLength;
-			if (basicLength) output.push(delimiter);
+			if (basicLength) output.push(delimiter$1);
 			while (handledCPCount < inputLength) {
 				var m = maxInt;
 				var _iteratorNormalCompletion2 = true;
@@ -48030,4 +48121,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createGitWorktreeManager, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-CRvusFIv.js.map
+//# sourceMappingURL=run-B2duge-W.js.map

package/dist/{run-BHRkyn_H.js → run-DRwOPt3k.js}

@@ -1,14 +1,14 @@
-import "./health-BQRsVP6s.js";
+import "./health-FUl73R5F.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
 import "./dist-DiNK6QOD.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-CRvusFIv.js";
-import "./manifest-read-Doh2Ion5.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-B2duge-W.js";
+import "./manifest-read-BkijWyWk.js";
 import "./routing-DFxoKHDt.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 import "./decision-router-BAPpON_C.js";
-import "./interactive-prompt-CgerI5Y6.js";
+import "./interactive-prompt-CtO5Tm6u.js";
 import "./recovery-engine-BKGBeBnW.js";
 
 export { runRunAction };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.20.141",
+  "version": "0.20.143",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",

package/packs/bmad/prompts/probe-author.md

@@ -8,6 +8,10 @@ You are a **probe-author agent**. Your sole responsibility is to author `## Runt
 
 ## Context
 
+### Project Environment
+
+{{project_env}}
+
 ### Rendered Acceptance Criteria (Story Artifact)
 
 The following is the story's rendered AC section, as produced by the create-story agent: